Re: Recommendation for IBMi privileges for an outsourcer to support an IBMi environment

One thing you didn't specify was what kind of production data you are
trying to protect.

Is this system being used to process payroll? You have to protect your
employee social security numbers. Don't limit that to the actual data
files. Make sure there are no spool files containing payroll reports. I
once did an audit for a company that did their own payroll. The CFO claimed
she had everything locked down. I ran a couple of queries to be printed,
and just happened to hit the function key allowing me to see all the
printers on the system. I found an output queue labeled W2. That queue
contained several years of W2's. I thought the CFO was going to pass out
when she saw that.

In addition, do you take credit card information from your customers? I've
seen a number of clients who thought credit card information was encrypted,
but it really wasn't.

Make sure you check everything before you go down this path. Letting an
outsourcer take over your system is like handing whiskey and your car keys
to a teenage boy. 😊