Sarbanes-Oxley compliance / BPCS user security maintenance

Dear Jerry,

Here is the URL for a brief PowerPoint show about the 
"By Invitation Only" software for maintaining BPCS user security:
   http://www.unbeatenpathintl.com/BIO-ppshow.pps 

The cost is P-tier based and affordable; even the largest iSeries
is currently priced under US$4000. Quite honestly, prices may 
be revised a bit after we have had more time to measure market 
acceptance of the product. 

Here are two other software product ideas that also address 
facets of the 2004 Sarbanes-Oxley compliance issue. 

Stitch-in-Time Data Integrity:
   http://www.unbeatenpathintl.com/stitch_in_time/source/1.html 

Internal Control Microscope:
   http://www.unbeatenpathintl.com/bellsmicroscope/source/1.html 

Warm regards and peace to you,

Milt Habeck
Unbeaten Path International

North America toll free: (888) 874-8008
International calls:  (262) 681-3151
mhabeck@xxxxxxxxxx  
www.unbeatenpathintl.com  




----- Original Message ----- 
From: Karth, Jerry 
To: 'SSA's BPCS ERP System' 
Sent: Wednesday, December 17, 2003 7:10 AM
Subject: RE: Sarbanes-Oxley compliance / BPCS user security maintenance

Good Morning:

 How can I obtain more information about this software ?
 Please advice as to features /functions and cost.

 Thank you,
 Jerry Karth
 Systems Engineer 
 



-----Original Message-----
From: Milt Habeck [mailto:mhabeck@xxxxxxxxxx] 
Sent: Tuesday, December 16, 2003 5:21 PM
To: BPCS user community
Subject: Sarbanes-Oxley compliance / BPCS user security maintenance

Good afternoon,

Although BMR 54119 may touch one user profile maintenance
subject, vanilla BPCS security maintenance still leaves much
to be desired --- particularly in view of the Sarbanes-Oxley (SOX)
compliance deadline arriving in 2004.

Look here for SOX Act compliance info in a nutshell:
   http://www.unbeatenpathintl.com/SO-act/source/1.html  

An IS manager (Tom) told me about their recent experience with a
SOX "dress rehearsal" audit. The auditor kept asking user authority
questions that were exceptionally difficult to answer using vanilla
BPCS. Tom felt that the "dress rehearsal" process would have been
much, much easier with our BPCS  "By Invitation Only"  software.

More about "By Invitation Only" software: 
   http://www.unbeatenpathintl.com/BIOnly-start/source/1.html  

Warm regards and Merry Christmas,

Milt Habeck



----- Original Message ----- 
From: Genyphyr Novak
To: SSA's BPCS ERP System
Sent: Friday, December 12, 2003 5:55 AM
Subject: Re: BPCS user profiles ---> security by obscurity

Hello,
The new releases of BPCS have enhancements to the BPCS SYS600 maintenance
program which allow the automatic expiration of any BPCS user ID which is
not also a valid user ID on the AS/400 by use of a single F key. There is a
2nd feature to permanently purge these IDs from the security files, if
desired. (BMR 54119).
Thanks,
Genyphyr Novak
SSA Global