On Tue, Jun 15, 2010 at 8:34 AM, George Henke <[email protected]> wrote:
> Thank you.
>
> The operative word here is "best practices".  Something that will survive an
> audit.

To pass an audit (internal and/or external) without qualification, it
is best to have a completely separate environment (HLQ, CICS, etc.)
for the UAT system.  Code and other related software changes should be
installed into the UAT system by the same means they would be
installed into your production systems.

Developers, QA and other on-call staff should be restricted from the
UAT system as the final measure to show there are proper firewalls in
place and that UAT truly represents the to-be production system.

Sam

>
> On Tue, Jun 15, 2010 at 10:28 AM, Peter Nuttall <[email protected]
>> wrote:
<snip>

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to