RE: Sarbanes-Oxley compliance / BPCS user security maintenance

Dear Jerry 
 
As a component of section 404 of Sarbanes-Oxley companies must provide a
statement identifying the framework used by management to evaluate the
effectiveness of internal control over financial reporting. 
 
DataThread, was designed and developed exactly for such internal
controls. It allows a company to monitor activity on any AS/400/iSeries
database. With DataThread controls, specific tolerances and watch points
can be configured over individual fields, and alerts are issued when
conditions beyond the limits are reached. For example, the Accounts
Payable file can be monitored for all payments over $25,000 or if the
amount is changed by any program other than those on a list of
acceptable programs. Imagine catching all DBU, ODBC and SQL updates
without having to read endless audit logs or change a single line of
code.  
 
 
DataThread has proven robustness and is functionally very rich.  For
these reasons, top Pharmaceutical and other manufacturing and retail
companies rely on DataThread for their government mandated and internal
database monitoring.  
 
Please feel free to contact me for more information, and visit the
DataThread page on our site at http://www.innovatum.com/dt-workflow.php
 
Best Regards
Ardi
 
 
 
Ardi Batmanghelidj 
Principal - Business Development 
Innovatum, Inc. 
ardibatman@xxxxxxxxxxxxx 
Direct Line: 978 443 1304 
Main Office: 877 277 3016 
 
 
-----Original Message-----
From: bpcs-l-bounces@xxxxxxxxxxxx [mailto:bpcs-l-bounces@xxxxxxxxxxxx]
On Behalf Of Milt Habeck
Sent: Monday, January 05, 2004 12:01 AM
To: BPCS user community
Subject: Sarbanes-Oxley compliance / BPCS user security maintenance
 
Dear Jerry,
 
Here is the URL for a brief PowerPoint show about the 
"By Invitation Only" software for maintaining BPCS user security:
   http://www.unbeatenpathintl.com/BIO-ppshow.pps 
 
The cost is P-tier based and affordable; even the largest iSeries
is currently priced under US$4000. Quite honestly, prices may 
be revised a bit after we have had more time to measure market 
acceptance of the product. 
 
Here are two other software product ideas that also address 
facets of the 2004 Sarbanes-Oxley compliance issue. 
 
Stitch-in-Time Data Integrity:
   http://www.unbeatenpathintl.com/stitch_in_time/source/1.html 
 
Internal Control Microscope:
   http://www.unbeatenpathintl.com/bellsmicroscope/source/1.html 
 
Warm regards and peace to you,
 
Milt Habeck
Unbeaten Path International
 
North America toll free: (888) 874-8008
International calls:  (262) 681-3151
mhabeck@xxxxxxxxxx  
www.unbeatenpathintl.com  
 
 
 
 
----- Original Message ----- 
From: Karth, Jerry 
To: 'SSA's BPCS ERP System' 
Sent: Wednesday, December 17, 2003 7:10 AM
Subject: RE: Sarbanes-Oxley compliance / BPCS user security maintenance
 
Good Morning:
 
 How can I obtain more information about this software ?
 Please advice as to features /functions and cost.
 
 Thank you,
 Jerry Karth
 Systems Engineer 
 
 
 
 
-----Original Message-----
From: Milt Habeck [mailto:mhabeck@xxxxxxxxxx] 
Sent: Tuesday, December 16, 2003 5:21 PM
To: BPCS user community
Subject: Sarbanes-Oxley compliance / BPCS user security maintenance
 
Good afternoon,
 
Although BMR 54119 may touch one user profile maintenance
subject, vanilla BPCS security maintenance still leaves much
to be desired --- particularly in view of the Sarbanes-Oxley (SOX)
compliance deadline arriving in 2004.
 
Look here for SOX Act compliance info in a nutshell:
   http://www.unbeatenpathintl.com/SO-act/source/1.html  
 
An IS manager (Tom) told me about their recent experience with a
SOX "dress rehearsal" audit. The auditor kept asking user authority
questions that were exceptionally difficult to answer using vanilla
BPCS. Tom felt that the "dress rehearsal" process would have been
much, much easier with our BPCS  "By Invitation Only"  software.
 
More about "By Invitation Only" software: 
   http://www.unbeatenpathintl.com/BIOnly-start/source/1.html  
 
Warm regards and Merry Christmas,
 
Milt Habeck
 
 
 
----- Original Message ----- 
From: Genyphyr Novak
To: SSA's BPCS ERP System
Sent: Friday, December 12, 2003 5:55 AM
Subject: Re: BPCS user profiles ---> security by obscurity
 
Hello,
The new releases of BPCS have enhancements to the BPCS SYS600
maintenance
program which allow the automatic expiration of any BPCS user ID which
is
not also a valid user ID on the AS/400 by use of a single F key. There
is a
2nd feature to permanently purge these IDs from the security files, if
desired. (BMR 54119).
Thanks,
Genyphyr Novak
SSA Global
 
_______________________________________________
This is the SSA's BPCS ERP System (BPCS-L) mailing list
To post a message email: BPCS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/bpcs-l
or email: BPCS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/bpcs-l.
 
 
Ardi Batmanghelidj 
Principal - Business Development 
Innovatum, Inc. 
ardibatman@xxxxxxxxxxxxx 
Direct Line: 978 443 1304 
Main Office: 877 277 3016