Re: SAVE 21 -CHGMSGQ QSYSOPR aut

[D.BALE@xxxxxxxxxxxxx]

>Your security officer SHOULD have done security auditing of the
>proposed change to find out what functions, such as the backup,
>would not be able to run after the change.

How is such security auditing done?

Dan Bale
IT - AS/400
Handleman Company
248-362-4400  Ext. 4952
D.Bale@Handleman.com
  Quiquid latine dictum sit altum viditur.
  (Whatever is said in Latin seems profound.)

-------------------------- Original Message --------------------------
Several of us in MIS use different sign-ons for different purposes.

A particular sign-on is used for doing backups.
That sign-on is not used for much of anything else.

We have an almost "security officer" sign on which has the right authorities
& library list to be loading updates to our application software, but
security will not let that "officer" actually RUN the application software.
People who can run the software cannot update it.

In a few cases, it is the same people, but we use a different sign-on for the
special functions & those functions cannot be used for ordinary work, because
I do not want someone signed on with a high security clearance doing ordinary
work, where they may get called away from their station, leaving the exposure
signed on.

We use the high security sign on for the high security work.  Period.

When a security officer function change is made, there is communication with
the MIS personnel to the point that we can investigate what the possible
consequences might be, instead of being faced with surprises.

Your security officer SHOULD have done security auditing of the proposed
change to find out what functions, such as the backup, would not be able to
run after the change.

MacWheel99@aol.com (Alister Wm Macintyre) (Al Mac)


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---