That should have said "corporate compliance officers". - -teD O-KAY! BLUE! JAYS! Let's PLAY! BALL!
-----Original Message----- From: Ted MacNEIL <[EMAIL PROTECTED]> Date: Wed, 17 May 2006 00:00:00 To:[email protected] Subject: Re: Password Complexity >> >>They can only cite rules; not make them. >> >How can you be so certain? If they are creating rules, they are corporate compliance auditors. If they are creating, enforcing, and reporting on rules, they have a conflict of duty. These three functions should be under what is known as "separation of duties". That's what got Anderson into trouble. How can I be so certain? I asked an auditor. - -teD O-KAY! BLUE! JAYS! Let's PLAY! BALL! ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html

