× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.



Mark,

There is no prohibition of emailing passwords in the Sarbanes-Oxley legislation (as a matter of fact, I don't even think the word "computer" is even referenced in the bill).

E-mailing passwords does contain some risk, but it is certainly a risk that can be mitigated with a wide assortment of compensating controls.

jte

Sent via BlackBerry from T-Mobile

-----Original Message-----
From: "Mark S. Waterbury" <mark.s.waterbury@xxxxxxx>

Date: Wed, 17 Jun 2009 13:33:57
To: Midrange Systems Technical Discussion<midrange-l@xxxxxxxxxxxx>
Subject: Re: AS400 Automatic Sending of New Password?


The whole idea of "automatically e-mailing passwords" seems flawed, and
depending on what industry your business is in, it may even be illegal.

This certainly won't fly with most auditors, especially if you work for
a company that must comply with the Sarbanes-Oxley Act or similar
legislation.




As an Amazon Associate we earn from qualifying purchases.

This thread ...

Follow-Ups:
Replies:

Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.