RE: Sarbanes-Oxley and the AS400

[PaulMmn <PaulMmn@xxxxxxxxxxxxx>]

Greg--

Our auditors were after all sorts of stuff, including a 
similar-sounding request for security access changes.

What -our- auditors were really after was seeing if we had controls 
over -application- security access changes.

We also make sure that the stuff they're auditing for -really- 
affects our financial results-- if it doesn't, they don't get to 
audit it!   d:

Make sure that they're really asking for what you think they're 
asking for!   (:

--Paul E Musselman
PaulMmn@xxxxxxxxxxxxxxxxxxxx



> Greg wrote (in part):
>
> > While I'm typing let me add that they also want a "list of users with
> > security access changes". I'm not entirely sure what that means nor how to
> > get a report. 
>  >We are at V4R4 and do not have auditing turned on.