Re: Programmer DFU access

[booth@xxxxxxxxxxxx]

This doesn't make sense.  Ask him to be more explicit.  Of course data has 
to be changed!  My goodness, how would a business function otherwise?  I'd 
guess that the whole idea would be to know who, what, when, why but of 
course it his guidance that you need.

_______________________
Booth Martin
Booth@MartinVT.com
http://www.MartinVT.com
_______________________




Johnny Helms <Johnny.Helms@rhtelco.com>
Sent by: owner-midrange-l@midrange.com
06/16/2000 07:29 AM
Please respond to MIDRANGE-L

 
        To:     MIDRANGE-L@midrange.com
        cc: 
        Subject:        Re: Programmer DFU access

The auditor was concerned with both. The main problem I have is that the 
data DOES need to be changed, so just securing the files will not help. 
How 
do other shops change actual data in files without using DFU on the 
production box?

Johnny Helms

At 12:36 AM 6/16/00 +0000, you wrote:
>Was the auditor's concern that the data could be changed with DFU, or was
>their concern that the data could be changed without a record of the
>change's time, user, or data?
>
>_______________________
>Booth Martin
>Booth@MartinVT.com
>http://www.MartinVT.com
>_______________________
>
>
>
>
>Johnny Helms <Johnny.Helms@RHTelCo.Com>
>Sent by: owner-midrange-l@midrange.com
>06/15/2000 02:32 PM
>Please respond to MIDRANGE-L
>
>
>         To:     MIDRANGE-L@midrange.com
>         cc:
>         Subject:        Programmer DFU access
>
>I am looking for suggestions on how to secure a current production AS/400
>that has programmer's using DFU to change data in files. We do have a
>development system and I thought change management would allow this
>practice to be ended. However, after talking with Aldon, they have no
>suggestions.  The reason I am trying to end this practice is due to an
>Audit we recently had that we failed miserably.
>
>TIA,
>
>Johnny Helms
>Mid-Range Sytems Engineer

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---