Re: I need a request-message handling program with prompting

Auditors are simplistic morons that typed up a sheet in 1987 on how to 
audit an iSeries shop and haven't updated it since.  They come out with 
the usual recommendations on only allowing a person to sign on to one 
terminal, etc.  Everything is based on the assumption that all access to 
your data is done with a 5250 interface.  No mention is paid to data 
security in the brave new world of the last century with things like 
iSeries Access, ftp, etc.

The thing to remember is that auditors are not God.  They are there to 
collect a check, (strike that as too negative).  They are there to make 
recommendations.  And the money lies with repeating the same outdated 
mantra.  Exceptions can be explained to management as to why you need 
exceptions.  You may know you're spewing manure when you say "what the 
auditors say makes a lot of sense, and they are good guidelines, however I 
feel it is cheaper for me to have multiple sessions than having you hire 
three people to fill my mod with different terminals and say now edit this 
while I do this."  Or try explaining to them how ridiculous it would be if 
the auditors forced them to exit excel or Word every time they wanted to 
check an email?  (The sad thing is that many of management probably do.)

Rob Berendt
-- 
"They that can give up essential liberty to obtain a little temporary 
safety deserve neither liberty nor safety." 
Benjamin Franklin 





"Booth Martin" <Booth@xxxxxxxxxxxx>
Sent by: midrange-l-bounces@xxxxxxxxxxxx
08/29/2003 09:41 AM
Please respond to Midrange Systems Technical Discussion
 
        To:     <midrange-l@xxxxxxxxxxxx>
        cc: 
        Fax to: 
        Subject:        Re: I need a request-message handling program with 
prompting


Will the auditors approve such a program? That would seem like a work 
around
that might be viewed as sabotage and cause you personal grief.
 
"go major" or "sltcmd" would seem like the only way to meet their
requirements. 
 
 
 
---------------------------------------------------------
Booth Martin http://www.MartinVT.com
Booth@xxxxxxxxxxxx
---------------------------------------------------------
 
-------Original Message-------
 
From: Midrange Systems Technical Discussion
Date: Thursday, August 28, 2003 4:31:39 PM
To: midrange-l@xxxxxxxxxxxx
Subject: I need a request-message handling program with prompting
 
All,
 
In my client's shop (a JDE World Software implementation), they have
recently locked down *everything* because of an impending IT audit.
 
 

_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.