RE: Preparing for a High-profile Termination

Search all source code for their user id to make sure they don't sabotage as
well.
I have seen this done more than once. Took more than 3 days to recover from the
last one.

Sharon


Steve Martinson wrote:

Situation:

High-profile, knowledgeable staff member soon to be terminated (employment,
not by Ahh-nold); has "keys to the kingdom" for both the System i and the
network; likely knows passwords for many service and/or utility profiles on
the iSeries.

Requirement:

Prior to term date, analyze system for vulnerabilities associated with a
position like the one described above and prepare a task list that will
address the situation both before and after the termination.

Areas to be reviewed include system values, network attributes (exit points
too), directory entries, SST, job descriptions, subsystem routing entries,
all user and group profile parameters and their implications, authorities to
libraries, directory (WRKLNK) authorities, etc.

Can anyone think of anything else that could be a critical hole that should
be reviewed/covered?

Best regards and TIA,

Steven W. Martinson, CISSP, CISM
Sheshunoff Management Services, LP.
Senior Consultant - Technology & Risk Management
2801 Via Fortuna, Suite 600 | Austin, TX 78746
Direct: 281.758.2429 | Mobile: 512.779.2630
e.Mail: smartinson@xxxxxxxxx

CONFIDENTIAL
This e-mail and any files transmitted with it are the property of
BillSoft, Incorporated and/or its affiliates, are confidential, and are
intended solely for the use of the individual or entity to whom this
e-mail is addressed. If there is a non-disclosure agreement in effect
between BillSoft and the recipient, the contents of this email and any
files transmitted with it should be treated as confidential under the
terms of such agreement. If you are not one of the named recipients or
otherwise have reason to believe that you have received this e-mail in
error, please notify the sender and delete this message immediately
from your computer. Any other use, retention, dissemination, forwarding,
printing or copying of this e-mail is strictly prohibited.

"BillSoft" and "EZTax" are registered trademarks of BillSoft,
Incorporated.