Re: SOX monitoring and journal interpreter

On the subject of auditing activity on the production system, when I was at
Nationwide Insurance, there were occasions when developers had to change
data on the fly in production. Just signing on to the system gave us
read-only access, but if we wanted to change anything, we had to call some
third-party commercial utility to give us enough authority to update data.
The utility required us to enter a description of our task at hand. From
what I was told, that utility recorded every screen and every keystroke. I
can't remember what it's called, but I've seen it referenced somewhere on
the midrange.com lists, probably midrange-l.

- Dan