RE: Sarbanes-Oxley / my opinion

["Doug Hart" <DougHart@xxxxxxxxxxxx>]

Yes, SOX was a knee jerk reaction by politicians to say they are doing
something to protect stock holders.

I can't speak on accounting audits but the IT audits seem focused on system
access.  I'm not aware that any of the companies listed below had problems
with unauthorized system access.  

Put simply, if your company financial VP calls you (iSeries secofr) and says
he needs access to the accounting DB you'll give it to him.  If he's a crook
your company gets on the short list.

My concern is much more on the integrity of the PFs not system access.  We
have always done a decent job with who gets to what.  But  who looks to
double check that your LF is built over the correct PF or in the right lib?
Do you check the libl of your Jobds and interactive jobs?  Are your end
users trained on the correct normalization of your DB to properly use their
ad-hoc query tools?  Do your (poorly paid and trained) operators understand
how and where to restore objects?   

SOX does not help our company build or sell product but has cost us big
bucks.  Tell that to the stock holders.

--
Doug Hart
 
 

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Al Mac
Sent: Tuesday, April 04, 2006 4:06 PM
To: Midrange Systems Technical Discussion
Subject: RE: Sarbanes-Oxley / my opinion


>I suppose my three immediate questions would be:
>1. What is SOX intended to prevent?

Another scandal like the ENRON, WORLDCOM, Arthur Andersen, Imclone, Tyco,
Martha Stewart, etal debacle, which is still winding its way through the
court system.