Re: IT Audit?

[rob@xxxxxxxxx]

You'll probably be getting the usual bunch of idiots that have on old 
yellowed sheet with things like:
- Change system value QLMTDEVSSN to 1 in order to prevent users from 
sharing passwords.
Just remember, they are recommendations, not absolutes.  Limiting users to 
1 session would kill the productivity of too many people here.  And why is 
it important to limit a person to 1 5250 session but let multiple 
Client/Server sessions, ftp sessions, etc, go on with a single user id? 
Answer:  Because it's easy and makes the auditors look like they are doing 
something useful.  Sort of like gun control.  We can already execute you 
for murder, but if you own a firearm the fear of going to jail might stop 
you from murdering someone.  Go figure.

But, it might not hurt to go to GO SECTOOLS and run those menu options to 
prepare for the audit.


Rob Berendt
-- 
Group Dekko Services, LLC
Dept 01.073
PO Box 2000
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





ron_adams@xxxxxxxxxxxxxx 
Sent by: midrange-l-bounces@xxxxxxxxxxxx
03/25/2005 11:12 AM
Please respond to
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>


To
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
cc

Subject
IT Audit?






I've just been informed by my manager that Monday, IT Auditors will be 
here. No word on what they'll be looking for, but I can only assume 
Sarbanes Oxley compliance high points.

Has anybody been thru one of these and want to share there experience?

Thanks,

Ron
-- 
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.