Re: Programmer DFU access

[booth@xxxxxxxxxxxx]

Was the auditor's concern that the data could be changed with DFU, or was 
their concern that the data could be changed without a record of the 
change's time, user, or data?

_______________________
Booth Martin
Booth@MartinVT.com
http://www.MartinVT.com
_______________________




Johnny Helms <Johnny.Helms@RHTelCo.Com>
Sent by: owner-midrange-l@midrange.com
06/15/2000 02:32 PM
Please respond to MIDRANGE-L

 
        To:     MIDRANGE-L@midrange.com
        cc: 
        Subject:        Programmer DFU access

I am looking for suggestions on how to secure a current production AS/400 
that has programmer's using DFU to change data in files. We do have a 
development system and I thought change management would allow this 
practice to be ended. However, after talking with Aldon, they have no 
suggestions.  The reason I am trying to end this practice is due to an 
Audit we recently had that we failed miserably.

TIA,

Johnny Helms
Mid-Range Sytems Engineer

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to 
MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: 
david@midrange.com
+---




+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---