We have to follow PCI (Payment Card Industry Standards) compliance rules.
We have set up similar policies & procedures, not to the extent of a DBA but
we do have separation of duties as much as we can in our small shop.
Debbie Kelemen
chefs Catalog
-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of
daparnin@xxxxxxxxxxxxxx
Sent: Wednesday, October 31, 2007 11:38 AM
To: Midrange Systems Technical Discussion
Subject: Re: Separation of Duties...
This sounds like a Sarbanes-Oxley requirement. Our parent company has to
comply with SOX. Their developers/analysts aren't allowed direct access
to live data. Perhaps that's what your auditors really want.
Dave Parnin
This mailing list archive is Copyright 1997-2026 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact
[javascript protected email address].
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.
midrange.com
