Situation:

High-profile, knowledgeable staff member soon to be terminated (employment, not
by Ahh-nold); has "keys to the kingdom" for both the System i and the network;
likely knows passwords for many service and/or utility profiles on the iSeries.

Requirement:

Prior to term date, analyze system for vulnerabilities associated with a
position like the one described above and prepare a task list that will address
the situation both before and after the termination.

Areas to be reviewed include system values, network attributes (exit points
too), directory entries, SST, job descriptions, subsystem routing entries, all
user and group profile parameters and their implications, authorities to
libraries, directory (WRKLNK) authorities, etc.

Can anyone think of anything else that could be a critical hole that should be
reviewed/covered?

Best regards and TIA,

Steven W. Martinson, CISSP, CISM
Sheshunoff Management Services, LP.
Senior Consultant - Technology & Risk Management
2801 Via Fortuna, Suite 600 | Austin, TX 78746
Direct: 281.758.2429 | Mobile: 512.779.2630
e.Mail: smartinson@xxxxxxxxx




As an Amazon Associate we earn from qualifying purchases.

This thread ...

Follow-Ups:

Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2022 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.