I used to work for a bank where security was always priority one
The way around this was to have the security officer change the password to a special profile and then place that password into a sealed envelope
Once a problem happened that required this special profile, the envelope would be given to the person on call, by an operator so that they could sign in
The password to the profile would then be changed the next business day and a new sealed envelope created
You HAVE to have a certain belief in the people that work for the company
If you don't have that belief, then you are going to have a MAJOR problem when things start going south
As far as both internal AND external auditors were concerned, this was NOT a problem. We always had the highest marks for this procedure
And like I said - this was a bank
Alan Shore
Solutions Architect
IT Supply Chain Execution
[cid:image003.png@01D74803.EB12D260]
60 Orville Drive
Bohemia, NY 11716
Phone [O] : (631) 200-5019
Phone [C] : (631) 880-8640
E-mail : ASHORE@xxxxxxxxxxxxxxxxxxxx
'If you're going through hell, keep going.'
Winston Churchill
From: WDSCI-L [mailto:wdsci-l-bounces@xxxxxxxxxxxxxxxxxx] On Behalf Of Justin Taylor
Sent: Thursday, May 13, 2021 2:18 PM
To: wdsc <wdsci-l@xxxxxxxxxxxxxxxxxx>
Subject: [EXTERNAL] Re: [WDSCI-L] CPF3676 on Debug As->IBMi job
It's most always after hours support for a production stoppage when the
proper authorities wouldn't be available to grant a waiver.
Thanks
date: Thu, 13 May 2021 16:26:55 +0000
from: Brian May <bmay@xxxxxxxxxxxxxxxxx<mailto:bmay@xxxxxxxxxxxxxxxxx>>
subject: Re: [WDSCI-L] CPF3676 on Debug As->IBMi job
Not sure if there is another way.
Would those on-high be open to having a special user profile with the
needed authority that is disabled? Then having a process to request use of
said profile with proper documentation/approval?
Brian May
Director
Pre-Sales and Customer Solutions
Profound Logic Software
http://www.profoundlogic.com<http://www.profoundlogic.com>
937-439-7925 Phone
877-224-7768 Toll Free
??
UI Modernization. And More!
www.profoundlogic.com<http://www.profoundlogic.com>
? ????
--
This is the Rational Developer for IBM i (WDSCI-L) mailing list
To post a message email: WDSCI-L@xxxxxxxxxxxxxxxxxx<mailto:WDSCI-L@xxxxxxxxxxxxxxxxxx>
To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/wdsci-l<
https://lists.midrange.com/mailman/listinfo/wdsci-l>
or email: WDSCI-L-request@xxxxxxxxxxxxxxxxxx<mailto:WDSCI-L-request@xxxxxxxxxxxxxxxxxx>
Before posting, please take a moment to review the archives
at
https://archive.midrange.com/wdsci-l<
https://archive.midrange.com/wdsci-l>.
Help support midrange.com by shopping at amazon.com with our affiliate
link:
https://amazon.midrange.com<
https://amazon.midrange.com>
midrange.com
