Re: metrics for determining health of an AS/400's IT department

Security - exit points secured; exception reporting available to Internal
auditors.
Look at the system values for security; how do they differ from those
defaults shipped?

Procedures - is there any quality control, and could they be followed by
anyone,
or just one person who knows what was meant when they wrote up
what is just a series of reminders to existing staff?

Bottom line for me would be asking for the internal results of their last
Disaster Recovery test,
and their latest External Audit recommendations.

In the event of having to relocate offsite, do staff know which libraries
to restore first, in which order?
Is that list up to date and kept offsite, or in "someone's car"? Who
notifies Operations when a new
production library is created? Who is responsible for adding it to the "A"
save?

Do major uploads and downloads depend on macros on IT PCs, or are they
fully documented
so that they could be set up to run anywhere else?

Does the DR site have a compatible tape drive?
What is used to log Every tape used for backups?
Where are they stored, who disposes of them?

My two cents,
Fiona



__________________________________

Notice of Confidentiality 

This transmission contains information that may be confidential and that may 
also be privileged. Unless you are the intended recipient of the message (or 
authorised to receive it for the intended recipient) you may not copy, forward, 
or otherwise use it, or disclose it or its contents to anyone else. If you have 
received this transmission in error please notify us immediately and delete it 
from your system.

Email: internet.mail@xxxxxxxxxxxxxxxx