-----Original Message-----
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
Behalf Of Pommier, Rex R.
Sent: Tuesday, August 10, 2010 2:28 PM
To: IBM-MAIN@bama.ua.edu
Subject: auditor request question

Hi List,

Quick question.  Do you require your operations staff to log onto the
z/OS consoles?  Our auditors are claiming this is "industry standard"
and so we need to be doing it, even though our consoles are all behind
locked doors.
<SNIPPAGE>

I've worked in at least 9 shops where console login was possible. None
of them required this. ONLY the hardware consoles required a logon (as
opposed to the MVS consoles).

The computer rooms were limited access. So only authorized personnel
were allowed in the computer room unescorted. 

In the case of mainframe environments where the printers are in one
place, the "command center" is in another, and the tape library/ATL
equipment are in yet another, the communications equipment in yet
another, how many times would you like one person to logon to do their
work as they moved around the shop handling their duties? In all the
places where I've worked with an MVS environment, each one of those
locations had a console so that commands could be entered immediately,
if and when so needed.

I think your auditors are PAPS oriented, and not mainframe oriented.

Regards,
Steve Thompson

-- Opinions expressed by this poster do not necessarily reflect those of
poster's employer --

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to