Ah, the (in)famous "industry recognized best practices". Which industry? Where is this Written? Are we talking about the data security 'industry' or the IP audit 'industry'.
Who is 'industry'? Do they have a web site? Where can I find these publications? Sorry. You do what the customer wants, of course. As we all do. Love your disclaimer tag. -----Original Message----- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Roach, Dennis (N-GHG) Sent: Friday, March 06, 2009 3:26 PM To: IBM-MAIN@bama.ua.edu Subject: Re: RACF password & id checking I have had to do exactly what is being discussed in z/OS and Linux. When you are a government contractor and the Inspector General's office says do it or the certification for the facility is canceled (along with your contract), you need no more business justification. As or security justification, all of the OIG requirements in this area are industry recognized best practices. Dennis Roach GHG Corporation Lockheed Martin Mission Services Flight Design and Operations Contract Address: 2100 Space Park Drive LM-15-4BH Houston, Texas 77058 Mail: P.O. Box 58487 Mail Code H4C Houston, Texas 77258 Phone: Voice: (281)336-5027 Cell: (713)591-1059 Fax: (281)336-5410 E-Mail: dennis.ro...@lmco.com All opinions expressed by me are mine and may not agree with my employer or any person, company, or thing, living or dead, on or near this or any other planet, moon, asteroid, or other spatial object, natural or manufactured, since the beginning of time. NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
