Re: Network Exit point security Poll

I would suggest such a poll be handled so that replies are
anonymous. As much as I'd like to see the results,
I won't answer to a permanent web archive (midrange.com)
a company's vulnerabilities. Almost all on this list are very traceable.
Why not ask David if we can set up a poll on his site?

(...from the experience of dealing with competitors spying on each other)
jim franz

----- Original Message ----- From: "Burns, Bryan" <Bryan_Burns@xxxxxxxxxxxx>
To: <MIDRANGE-L@xxxxxxxxxxxx>
Sent: Wednesday, April 04, 2007 11:12 AM
Subject: Network Exit point security Poll

I'm implementing a third party software package to secure our network exit points and I'm interested in how we compare to other shops.

1. Do you have object level security on your system?
a. Yes
b. No, but we have a third party exit point security program
c. No, but we have our own exit point program
d. No, but our users don't have command lines and don't do much ODBC to our box and we think we're safe.
2. How many user profiles do you have?
3. How many users have *ALLOBJ authority
4. What do think your greatest ODBC related security risk is?
5. Are you a Sarbanes-Oxley shop?
6. And because I'm nosy, what does your company do?

For us, it's
1 - b
2 -150
3 - About 10
4 - An MS Access linked table, since we don't have object level security.
5 - No.
6 - We make outdoor power equipment such as grass trimmers, chainsaws, leaf blowers, etc. You may have seen them at The Home Depot.

Thanks,


Bryan Burns
IBM Certified Specialist - iSeries System Command Operations V5R2
M.I.S. Department
ECHO, Incorporated
www.echo-usa.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.