Greg Dorner wrote: >Man, the auditors came up with a new one!
>"Gap noted. Automated controls to prevent the installation of unapproved >software were not documented." DANGER! ALARM! EVACUATE! START DRP! GAP NOTED IN AUDITORS BRAIN CELLS! ;-D After reading all those threads: I have one request for you: Ask them to give EXAMPLE(s) of 'Automated controls' as well as Documentation from IBM themselves including 'Statement of Integrity'. Oh, please define these words in this context: 'prevent', 'installation' and 'unapproved'. This is not that I'm being funny, but you will get a baseline to work with. That will shut them up for a while, while they fill up their gaps. For myself, I should be courtmartialed and fired for doing 'things' on my z/OS toy... (Writing programs in many different languages for 1001 things, upload CBT programs, installing and testing products, inventing custom RACF admin chores and reporting, assisting all my teams in 1001 things... etc.) >Any thoughts? I also accept rants and expletives. Will you pass these 'rants and expletives' to these auditors? :-D Groete / Greetings Elardus Engelbrecht ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
