Agree, and just as an example, just this morning I have spend (wasted) 3 hours responding to and working on audit issues for HITRUST, I am the only sysprog working on z/OS and I'm loosing time trying to upgrade from 2.3 to 2.4, each day I think I'll get some time to concentrate on the USERMODS, EXITS, USS customization, EXITS, CATALOG issues and each day I am forced to go back 10 and punt :( Carmen Vitullo
-----Original Message----- From: Seymour <[email protected]> To: IBM-MAIN <[email protected]> Date: Friday, 19 February 2021 8:51 AM CST Subject: Re: Are these auditors competent? was Re: Anyway to save ISRDDN output? Not just PARMLIB, but subsequent changes. -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 ________________________________________ From: IBM Mainframe Discussion List [[email protected]] on behalf of Clark Morris [[email protected]] Sent: Thursday, February 18, 2021 5:01 PM To: [email protected] Subject: Are these auditors competent? was Re: Anyway to save ISRDDN output? [Default] On 18 Feb 2021 05:12:25 -0800, in bit.listserv.ibm-main [email protected] (Carmen Vitullo) wrote: >I actually like the IBM health checker idea, I know I've been told over and >over it needs to be ISRDDN, but I really think it's because that's all they >know, they are lazy to say the least. As I suggested in a prior posting, I would investigate these auditors. If your postings reflect their knowledge and approach I would not have any confidence in their findings. As Peter Relson said D PROG,APF is more trustworthy than ISRDDN. However, they also should be interested in all PARMLIB members that can cause a library to be APF authorized as well as means of updating APF libraries. A competent auditor can help improve your system. An incompetent one can waste your and management's time and money and may even leave your system more vulnerable. Clark Morris >thanks > >Carmen Vitullo > > > >-----Original Message----- > >From: Peter <[email protected]> >To: IBM-MAIN <[email protected]> >Date: Thursday, 18 February 2021 6:50 AM CST >Subject: Re: Anyway to save ISRDDN output? > >If I were an auditor, I'd prefer an approach that is implemented by a >required base element of the operating system (where SDSF and, I think, >ISPF do not meet that criterion) > >That would cover: >-- hzsproc CHECK(IBMCSV,CSV_APF_EXISTS) >-- DISPLAY PROG,APF > >Or provide my own (if I trust myself) >-- a program I provided that issues CSVAPF REQUEST=LIST and surfaces the >output > >But that's just me. And I'm no auditor. > >Peter Relson >z/OS Core Technology Design > > >---------------------------------------------------------------------- >For IBM-MAIN subscribe / signoff / archive access instructions, >send email to [email protected] with the message: INFO IBM-MAIN > >---------------------------------------------------------------------- >For IBM-MAIN subscribe / signoff / archive access instructions, >send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
