Re: PCI "Read Access"

I think auditing on program access would show the program being used with
files other than your production data. This could point a finger at
unauthorized transactions that don't show up in your audited data.

And don't expect the auditor to be concerned with practical things like
performance. That would just become a cost of doing business.


Steve

Steven Morrison
Fidelity Express





Steven Martinson <smart-consultant@xxxxxxxxxxxxx>
Sent by: midrange-l-bounces@xxxxxxxxxxxx
04/16/2008 02:54 PM
Please respond to
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>


To
Midrange List <midrange-l@xxxxxxxxxxxx>
cc

Subject
PCI "Read Access"






Can anyone in this audience surmise how having *ALL OBJAUD on *PGM objects
would buy an organization anything with regard to PCI critical object
access monitoring? I say that if you have *ALL on the critical *FILE
objects, the audit journal is already going to record Job Name, Job User,
Job Number, Program Name, User Profile, Entry Type, etc., etc., and all
that.

I would think (without testing it, so far) that have *ALL on heavily used
programs in a fairly large organization would pound the audit journal
unnecessarily.

Any and all input appreciated!

Best regards,



Steven W. Martinson, CISA, CISM, CISSP
Security Consultant
Cypress, Texas



Smart-Consultant@xxxxxxxxxxxxx
Mobile: 713.277.5845
Fax: 281.758.2429