Re: Journal Receiver Retention for SOX...

Well, I'm our IT Security guy and the iSeries admin.  However, we're
large enough that we have a project manager who does SOX & other
compliance basically full-time.  I work with her a lot on these issues
and get to sit in on the audit reviews.

If you have a few minutes, go read SOX section 404.  This is what's
driving all the IT work yet you'll find IT is barely mentioned.  Almost
everything is left to interpretation.  


John A. Jones, CISSP
Americas Information Security Officer
Jones Lang LaSalle, Inc.
V: +1-630-455-2787 F: +1-312-601-1782
john.jones@xxxxxxxxxx

-----Original Message-----
From: security400-bounces@xxxxxxxxxxxx
[mailto:security400-bounces@xxxxxxxxxxxx] On Behalf Of Dan
Sent: Wednesday, August 23, 2006 7:52 AM
To: Security Administration on the AS400 / iSeries
Subject: Re: [Security400] Journal Receiver Retention for SOX...

On 8/23/06, Turnidge, Dave <DTurnidge@xxxxxxxxxxxxxxxxxxxx> wrote:

Thank you Dan. I've gotten messages kicked out of other sites, so 
guess I'm getting gun-shy...

Uh, well, given the responses you've gotten here, I think *I* was the
one who got "told" (implicitly) on this thread!  ;-)

Maybe the people who "do" SOX as part of their jobs can confirm.  Does
the responsibility for the IT part of SOX always/usually fall on the IT
security admin?

- Dan
_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400)
mailing list To post a message email: Security400@xxxxxxxxxxxx To
subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at
http://archive.midrange.com/security400.
 

This email is for the use of the intended recipient(s) only.  If you have 
received this email in error, please notify the sender immediately and then 
delete it.  If you are not the intended recipient, you must not keep, use, 
disclose, copy or distribute this email without the author's prior permission.  
We have taken precautions to minimize the risk of transmitting software 
viruses, but we advise you to carry out your own virus checks on any attachment 
to this message.  We cannot accept liability for any loss or damage caused by 
software viruses.  The information contained in this communication may be 
confidential and may be subject to the attorney-client privilege. If you are 
the intended recipient and you do not wish to receive similar electronic 
messages from us in future then please respond to the sender to this effect.