On Mon, May 11, 2009 at 7:28 PM, Josh Smift <[email protected]> wrote: > JR == Jo Rhett <[email protected]> > > JR> Say yes, and send them SSH logs. They don't know the difference. > > Seriously, especially when the requirements are ridiculous. I've had > auditors require that we send them JPEG images of terminal windows, rather > than cut-and-pasted text from those windows, as if the fact that it's a > screenshot somehow makes it harder to fake.
Screenshots are easier for auditors to embed in Word docs for reporting and generally is the same procedure that Windows admins use for documenting their controls. It sucks, but it's not without reason. -n -- ------------------------------------------- nathan hruby <[email protected]> metaphysically wrinkle-free ------------------------------------------- _______________________________________________ Discuss mailing list [email protected] http://lopsa.org/cgi-bin/mailman/listinfo/discuss This list provided by the League of Professional System Administrators http://lopsa.org/
