RE: PROGRAMMER ACCESS TO PRODUCTION ENVIRONMENT

[Greg Wenzloff <GWenzloff@xxxxxxxxxxx>]

Candy,

We are starting to prepare for SOX and would appreciate if you tell us more
of what the auditors looked for and on how you prepared for the audit.

We also are a very small shop and have not had to concentrate on
security/documentation/procedures/audit trails on data changes/and all the
other areas that SOX gets into.  

For example, did you set up journaling on your financial files such as
GELMAS, TEMGEN, CURHIS?

Has MAPICS given any thought on helping us out with those types of controls?

It seems to me that we would have to radically reform the way data
processing is done here to even get close to the requirements of SOX.

Anyone else with input please join the thread.

Thanks,
Greg


-----Original Message-----
From: Candy.Hein@xxxxxxxxxxxx [mailto:Candy.Hein@xxxxxxxxxxxx] 
Sent: Thursday, October 21, 2004 5:39 PM
To: mapics-l@xxxxxxxxxxxx
Subject: PROGRAMMER ACCESS TO PRODUCTION ENVIRONMENT

My boss asked me to pose this question on the MAPICS user group list.   We
are a small shop with 2 full-time programmers and 2 part-time contractors.
The full time programmers are responsible for setting up MAPICS security for
users.   Part of the audit comments during our Sarbanes-Oxley audit  was to
eliminate all programmers access to the production environment including
security (of course they have no suggestion on who would set up security).
We would like to know how other small shops handle this situation.  Do your
programmers have access to the production environment?  Who is responsible
for establishing MAPICS security on your system?

 

Thank you,

Candy Hein

 

_______________________________________________
This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
To post a message email: MAPICS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/mapics-l
or email: MAPICS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/mapics-l.