Re: Sarbanes-Oxley request to install iSphere library

The iSphere program library resides on the System i.

You should follow the same procedure as installing new, purchased software. SOX needs to keep track of changes to the production environment. Library ISPHERE will be created and there will be new objects added. Tell them that it is utility software for development and has not effect on production data or programs. You may be able to make the case that this library should be excluded from the audit, unless they are tracking every object change.


Bill Pahl
Information Systems Consultant

Agility Inc.
7000 Fitzwater Rd. | Suite 220 | Brecksville, OH 44141
440-397-9481
bpahl@xxxxxxxxxxxxxxx



-----Original Message-----
From: WDSCI-L [mailto:wdsci-l-bounces@xxxxxxxxxxxx] On Behalf Of Charles Wilt
Sent: Wednesday, August 5, 2015 10:24 AM
To: Rational Developer for IBM i / Websphere Development Studio Client for System i & iSeries <wdsci-l@xxxxxxxxxxxx>
Subject: Re: [WDSCI-L] Sarbanes-Oxley request to install iSphere library

Why would you need iSphere on your production machine?

Do you only have 1 box?

Honestly, there's no reason you shouldn't be able to create a library due to SOX.

Installing new software is probably a different story; particularly if RSTxxx commands are needed. But there should be a defined process to make the request.

On Wed, Aug 5, 2015 at 9:19 AM, Dan <dan27649@xxxxxxxxx> wrote:

Developers don't have authority to restore or even create libraries at
the shop I just started in. So, in order to get the ISPHERE library
installed, I need to submit a request to the auditors for their approval.

I'm wondering if anyone has a template I can use. I'm not intimately
familiar with SOX, but I imagine they'll be raising flags on this for
the open source, because, you know, auditors.

A colleague suggested mentioning that it is a development tool for
technical use, and no end users will ever use this library.

Ideas?

- Dan
--
This is the Rational Developer for IBM i / Websphere Development
Studio Client for System i & iSeries (WDSCI-L) mailing list To post a
message email: WDSCI-L@xxxxxxxxxxxx To subscribe, unsubscribe, or
change list options,
visit: http://lists.midrange.com/mailman/listinfo/wdsci-l
or email: WDSCI-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/wdsci-l.

--
This is the Rational Developer for IBM i / Websphere Development Studio Client for System i & iSeries (WDSCI-L) mailing list To post a message email: WDSCI-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/wdsci-l
or email: WDSCI-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at http://archive.midrange.com/wdsci-l.