That should have said "corporate compliance officers".
-
-teD

O-KAY! BLUE! JAYS!
Let's PLAY! BALL!

-----Original Message-----
From: Ted MacNEIL <[EMAIL PROTECTED]>
Date:         Wed, 17 May 2006 00:00:00 
To:[email protected]
Subject: Re: Password Complexity

>>
>>They can only cite rules; not make them.
>>
>How can you be so certain?

If they are creating rules, they are corporate compliance auditors.

If they are creating, enforcing, and reporting on rules, they have a conflict 
of duty.

These three functions should be under what is known as "separation of duties".
That's what got Anderson into trouble.

How can I be so certain?
I asked an auditor.


-
-teD

O-KAY! BLUE! JAYS!
Let's PLAY! BALL!

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to