>Any auditor that claims everyone uses 3 or that there is something magic that >makes "3" optimum is shoveling B.S.
As I said in my original response, it's the security people. Auditors do not set rules. That's for the SME's. Auditors do not enforce rules. That's for the compliance department. Auditors take input from the SME's and report on how you are doing to the compliance people. Anything else is wrong. . Questions? Concerns? (Screems of Outrage?) ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
