My favorite auditor request was when an auditor asked for a printout from my
VM/SP system. I had to leave the meeting before my boss could finish laughing.
The auditor wanted /etc/passwd.
/Tom Kern
--- "McKown, John" <[EMAIL PROTECTED]> wrote:
> > Shouldn't any competent auditor who is asking about a
> > vendor's programs know
> > that they have to ask the vendor, not the user? Shouldn't your only
> > response have to be "Ask IBM"?
> >
> > Oops. Is "competent auditor" an oxymoron?
> >
> Reminds me of an actual request from an auditor many years ago:
>
> <quote>
> List all possible exits in every piece of software installed on your MVS
> system. Futher detail everything that could be done by using those
> exits.
> </quote>
>
__________________________________
Yahoo! Mail - PC Magazine Editors' Choice 2005
http://mail.yahoo.com
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
