Re: MAPICS - QSECURITY system value

Tell me about it!  My IT group is getting slaughtered over this.  I am
currently just starting my new security level upgrade to be able to enforce
our newly-imposed standards.  The problem is that we are a $100 million
division being held to the same standards and requirements as a
multi-billion dollar corporation.  The manpower and paperwork requirements
are absurd.  And a lot of companies that are impacted are smaller than us!

What appears to me to be the biggest problem is that the auditors seem to
be interpreting the requirements on their own, rather than having firm
rules laid down.  How strictly do you think they will be interpreting them?
(Let's see - they make HOW much per hour?)

What really bugs me is that we get audited regularly, and always pass with
flying colors - and we still will have to do all this stuff....

Dale Gindlesperger
IT Manager/Special Projects Leader
Fleetwood Folding Trailers, Inc.
258 Beacon Street
Somerset, PA  15501




                                                                           
             Greg Wenzloff                                                 
             <GWenzloff@beckmf                                             
             g.com>                                                     To 
             Sent by:                  "'mapics-l@xxxxxxxxxxxx'"           
             mapics-l-bounces@         <mapics-l@xxxxxxxxxxxx>             
             midrange.com                                               cc 
                                                                           
                                                                   Subject 
             03/18/2005 02:44          MAPICS - QSECURITY system value     
             PM                                                            
                                                                           
                                                                           
             Please respond to                                             
             MAPICS ERP System                                             
                Discussion                                                 
             <mapics-l@midrang                                             
                  e.com>                                                   
                                                                           
                                                                           




Has anyone's Sarbanes-Oxley auditors insisted that the AS400 security level
must be higher than 30?   This has been implied to me but not forcibly
stated.

I had pre-auditors here for 9 days and they barely scratched the surface.
It makes me sick to know how much money is being blown because of this law.

Greg


_______________________________________________
This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
To post a message email: MAPICS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/mapics-l
or email: MAPICS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/mapics-l.