RE: QSECOFR usage

["John Earl" <john.earl@xxxxxxxxxxxxx>]

Dave,

> In light of SOX compliance, how much are people finding
> that SOX
> auditors are asking for proof on who is using the QSECOFR
> sign on in
> environments where more than one person knows the
> password. And how have
> you addressed it.

Please excuse the out-right vendor plug here, but PowerTech has a
product that was designed specifically to handle this situation.  

It's called PowerLock AuthorityBroker and it allows you to designate who
can use powerful profiles like QSECOFR (or a cloned alternate, as others
in this thread have suggested), when they can be used, and who should be
notified when one of these profiles is checked out.  There is also a
robust auditing and reporting capability that allows the auditors to see
everything that a person did when they checked out a powerful profile -
something that a lot of SOX auditors are asking for.

If you have V5R3 in house already, then you already have a copy of
AuthorityBroker.  It's shipped with i5/OS on a CD with the sexy title
"non-IBM Software" :) and comes with a 30 day trial license.  You can
also download the latest version from our website at
http://www.powertech.com/p_products_ab.html 



Hope this helps,

jte


--
John Earl | Chief Technology Officer
The PowerTech Group
19426 68th Ave. S
Seattle, WA 98032
(253) 872-7788 ext. 302
john.earl@xxxxxxxxxxxxx
www.powertech.com 
 

 
This email message and any attachments are intended only for the use of
the intended recipients and may contain information that is privileged
and confidential. If you are not the intended recipient, any
dissemination, distribution, or copying is strictly prohibited. If you
received this email message in error, please immediately notify the
sender by replying to this email message, or by telephone, and delete
the message from your email system.
--

> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-
> bounces@xxxxxxxxxxxx] On Behalf Of Dave Snyder
> Sent: Thursday, February 23, 2006 11:06 AM
> To: Midrange Mailing List
> Subject: QSECOFR usage
> 
> In light of SOX compliance, how much are people finding
> that SOX
> auditors are asking for proof on who is using the QSECOFR
> sign on in
> environments where more than one person knows the
> password. And how have
> you addressed it.
> 
> 
> 
> Any input is appreciated.
> 
> 
> 
> Dave
> 
> 
> 
> --
> This is the Midrange Systems Technical Discussion
> (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit:
> http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the
> archives
> at http://archive.midrange.com/midrange-l.
>