If my system is audited, I want the auditor to be competent, informed and paranoid. If something is wrong then I want to know.
Of course, if he is paranoid without the other two it's a disaster. -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 עַם יִשְׂרָאֵל חַי נֵ֣צַח יִשְׂרָאֵ֔ל לֹ֥א יְשַׁקֵּ֖ר ________________________________________ From: IBM Mainframe Discussion List <[email protected]> on behalf of Tom Longfellow <[email protected]> Sent: Wednesday, December 11, 2024 8:47 AM To: [email protected] Subject: Re: SMPE and auditors External Message: Use Caution Your word and SMPLOG should back your claims. But even that will not work for the auditor that does not trust anyone or anything (which is what they THINK is their job). Many unfounded requests are based upon misunderstandings and mistrust. I agree with the general response I have seen here of complete transparancy. Flood them with all the truths you can find. The next response from them will be for you to 'simplify' this into a pretty report they can use to look good for their bosses. Your response MUST be "Sir, I cannot. To do so would be to make judgement calls to get the full and complete information summarized without errors or omissions. And you have already established that my judgement is suspect and cannot be trusted to check my work" and "Sir, you are asking me to proved a negative. That i did not use the BYPASS ERRORSYSMODS. It is impossible to prove a negative" I always like to look at things from other angles. Why is the mainframe hit for this kind of thing? --- Because we can provide answers. I do not believe that standards in the Windows/Linux server world are as robust. I could be wrong. I am not an expert in those fields. Do they scrutinize the latest Windows Patch bundle with the same detail? I am approaching the end of 40+ years on mainframes. Thanks for the reminder of the silver lining - "No more auditors" ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
