"I would submit that the best protection point here is the desktop screen
saver, and not the OS/400 clear text QDSIGNON screen..."
John - Clearly in one of my previous posts, where I mentioned that I was once charged to actually visit desktops and verify screensavers, I advocate balanced controls, with the desktop control considered as one of them (this would also reduce or eliminate the need for the green-screen inactivity control).
I bring up the consideration of risk only because too many organizations don't consider it before jumping on some bandwagon and fixing things with a band-aid solution, something I see far too often in the i5/OS security world.
Best regards,
Steven W. Martinson, CISSP, CISM
Sheshunoff Management Services, LP.
Senior Consultant - Technology & Risk Management
2801 Via Fortuna, Suite 600 | Austin, TX 78746
Direct: 281.758.2429 | Mobile: 512.779.2630
e.Mail: smartinson@xxxxxxxxx
As an Amazon Associate we earn from qualifying purchases.
This thread ...
RE: script to change Client Access .ws profiles, (continued)
This mailing list archive is Copyright 1997-2026 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact
[javascript protected email address].
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.
midrange.com
