On Thu, 18 Feb 2021, at 13:31, Seymour J Metz wrote: > ObSturgeon'sLaw A competent auditor would understand that there are > several viable approaches and would give a requirement rather than an > implementation. Using HC is certainly one of them. I'd probably write a > script to issue "DISPLAY PROG,APF,ALL" using CONSOLE and capture the > output the a file, but direct use of CSVAPF would be more transparent > for an auditor familiar with MVS.
It's been a long time since I was last involved in something like this, but I'm fairly sure our auditors came to see us and sat with us as we executed various commands. If we printed screens, then they could see that the paper they took away matched what was on those screens. I can't see how any command that dumps its output into a file, which you then send to auditors is any good. How do they know that the file hasn't been created by hand, or edited between being produced and sent? -- Jeremy Nicoll - my opinions are my own. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
