Re: Preparing for a High-profile Termination

[Booth Martin <booth@xxxxxxxxxxxx>]

Locks, keys, and off-site facilities.  Borrowed assets.  Vendor contacts 
and special relationships with other employees.



Steve Martinson wrote:
> Situation:
>
> High-profile, knowledgeable staff member soon to be terminated (employment, not by 
> Ahh-nold); has "keys to the kingdom" for both the System i and the network; 
> likely knows passwords for many service and/or utility profiles on the iSeries.
>
> Requirement:
>
> Prior to term date, analyze system for vulnerabilities associated with a 
> position like the one described above and prepare a task list that will address 
> the situation both before and after the termination.
>
> Areas to be reviewed include system values, network attributes (exit points 
> too), directory entries, SST, job descriptions, subsystem routing entries, all 
> user and group profile parameters and their implications, authorities to 
> libraries, directory (WRKLNK) authorities, etc.
>
> Can anyone think of anything else that could be a critical hole that should be 
> reviewed/covered?
>  
> Best regards and TIA,
>  
> Steven W. Martinson, CISSP, CISM
> Sheshunoff Management Services, LP.
> Senior Consultant - Technology & Risk Management
> 2801 Via Fortuna, Suite 600 | Austin, TX 78746
> Direct: 281.758.2429 | Mobile: 512.779.2630
> e.Mail: smartinson@xxxxxxxxx
>
>
>        
> ____________________________________________________________________________________
> Sick sense of humor? Visit Yahoo! TV's 
> Comedy with an Edge to see what's on, when. 
> http://tv.yahoo.com/collections/222
>