MIDRANGE dot COM Mailing List Archive



Home » MIDRANGE-L » July 2014

RE: Change Management for small shops



fixed

I use it frequently to expose programmers who put code on a production
machine without going through proper channels.

Then there are the dumb questions from the auditors, like, "Why does this
object in the QSYS library have a different install date than most of the
other objects?"

Me: "That was part of an IBM service pack."
Auditor: "What was this for?"
Me: "Regular maintenance on the system."
Auditor: "Did it go through your change management system?"
Me: "Nope. It went through IBM's change management system."
Auditor: "Please provide me with the details of what this object does."
Me: "Nope. It's related to security."
Auditor: "I need to know what it does."
Me: "IBM doesn't tell users about security patches."
Auditor: "I still need to know."
Me: "It's over your pay grade and my pay grade. IBM won't even tell Mr.
Ernst or Mr. Young."
Auditor: "Oh, okay."


Paul Nelson
Cell 708-670-6978
Office 409-267-4027
nelsonp@xxxxxxxxxxxxx


-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of
Monnier, Gary
Sent: Wednesday, July 23, 2014 3:44 PM
To: Midrange Systems Technical Discussion
Subject: RE: Change Management for small shops

The cost will depend on how you answer the auditor's "Prove to me"
questions.

Questions like "Prove to me this production object has not been altered
outside approved channels.", "Prove to me your home-grown process actually
does what you say it does." And "Prove to me your procedures satisfy SOX
compliance."


-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Mike
Cunningham
Sent: Wednesday, July 23, 2014 1:34 PM
To: Midrange Systems Technical Discussion
Subject: RE: Change Management for small shops

Without revealing any vendor secrets, what does a change management with
deployment cost ? upfront and yearly. We only have 6 developers who all sit
within 20 feet of each other and talk daily and they manager is also in the
same space so never really found the cost to be justified and our auditors
have been OK with it in the past. But auditors have different opinions
sometimes and we just got someone new for the financial audit.

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of
Thomas Garvey
Sent: Wednesday, July 23, 2014 2:46 PM
To: Midrange Systems Technical Discussion
Subject: Re: Change Management for small shops

TD/OMS (formerly known as Tight As a Drum) handles all of that: source and
object control, IFS documents (everything), complete life cycle management,
and excels at roll-outs and roll-backs to multiple targets.





Thomas Garvey
<http://www.unpath.com/>




On 7/23/2014 1:09 PM, rob@xxxxxxxxx wrote:
And a good change management product will tell you when you try to
roll out a printer file from development to production if someone
changed any attributes on the production, like changing default
printer, overflow line, etc. Stuff that you don't even need to recompile
for.


Rob Berendt

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe,
or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe,
or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.






Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2014 by MIDRANGE dot COM and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available here. If you have questions about this, please contact