Re: I need a request-message handling program with prompting

[<shannonjano@xxxxxxxxxxxxxxx>]

Auditor are people who would otherwise be functionally-unemployable.  Kind
of like movie critics (and many state workers! ha!).  For this type of
personality...it's easier to tell someone else what they are doing wrong
than it is to do it themselves.

And actual technical skills are not required to perform an audit. Just the
ability to regurgitate the same catch-phrases heard over and over in the
modern lexicon and the to spit out the same old audit-advice being offered
since at least 1983.

But what do I know?   I work for a living....

Shannon O'Donnell


----- Original Message ----- 
From: <rob@xxxxxxxxx>
To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
Sent: Friday, August 29, 2003 10:15 AM
Subject: Re: I need a request-message handling program with prompting


> Auditors are simplistic morons that typed up a sheet in 1987 on how to
> audit an iSeries shop and haven't updated it since.  They come out with
> the usual recommendations on only allowing a person to sign on to one
> terminal, etc.  Everything is based on the assumption that all access to
> your data is done with a 5250 interface.  No mention is paid to data
> security in the brave new world of the last century with things like
> iSeries Access, ftp, etc.
>
> The thing to remember is that auditors are not God.  They are there to
> collect a check, (strike that as too negative).  They are there to make
> recommendations.  And the money lies with repeating the same outdated
> mantra.  Exceptions can be explained to management as to why you need
> exceptions.  You may know you're spewing manure when you say "what the
> auditors say makes a lot of sense, and they are good guidelines, however I
> feel it is cheaper for me to have multiple sessions than having you hire
> three people to fill my mod with different terminals and say now edit this
> while I do this."  Or try explaining to them how ridiculous it would be if
> the auditors forced them to exit excel or Word every time they wanted to
> check an email?  (The sad thing is that many of management probably do.)
>
> Rob Berendt
> -- 
> "They that can give up essential liberty to obtain a little temporary
> safety deserve neither liberty nor safety."
> Benjamin Franklin
>
>
>
>
>
> "Booth Martin" <Booth@xxxxxxxxxxxx>
> Sent by: midrange-l-bounces@xxxxxxxxxxxx
> 08/29/2003 09:41 AM
> Please respond to Midrange Systems Technical Discussion
>
>         To:     <midrange-l@xxxxxxxxxxxx>
>         cc:
>         Fax to:
>         Subject:        Re: I need a request-message handling program with
> prompting
>
>
> Will the auditors approve such a program? That would seem like a work
> around
> that might be viewed as sabotage and cause you personal grief.
>
> "go major" or "sltcmd" would seem like the only way to meet their
> requirements.
>
>
>
> ---------------------------------------------------------
> Booth Martin http://www.MartinVT.com
> Booth@xxxxxxxxxxxx
> ---------------------------------------------------------
>
> -------Original Message-------
>
> From: Midrange Systems Technical Discussion
> Date: Thursday, August 28, 2003 4:31:39 PM
> To: midrange-l@xxxxxxxxxxxx
> Subject: I need a request-message handling program with prompting
>
> All,
>
> In my client's shop (a JDE World Software implementation), they have
> recently locked down *everything* because of an impending IT audit.
>
>
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>
>
>