To put controls on dictionary items, data (eg. control records), and VOC items (Paragraphs and Procs), you need your repositories to be type 19.

If this is part of a SOX compliance exercise, if you do not control your dictionaries (calculations are code) and VOC's (paragraphs and procs are code), you will fail a SOX audit if the auditors know what they are doing. Of course, like some shops, you could decide to hide that fact from the auditors, assuming you want to run the legal risk <ahem>.

Now, if you subscribe to my view that we should do the Right Thing because it is the Right Thing To Do, you'll put these under control regardless. It is hard to control risk management when a single unauthorized, untested, uncontrolled change to a dictionary item can blow a month-end run to hell and back.

If you want to pursue OpenSource options, I can help you. Contact info is in the sig block below. If you want a more seamless solution that is not OpenSource, I suggest you look at PRC (http://sjplus.com/).

If you want an introduction to COBIT (Control OBjectives for Information and related Technology) and IT Governance, see my articles in the Jan/Feb and Mar/Apr of Spectrum Magazine at

     http://www.intl-spectrum.com/SPECTRUMMAG.HTML

I can also e-mail copies to anyone who is not allowed to http from work.

--

Regards,

Clif

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
W. Clifton Oliver, CCP
CLIFTON OLIVER & ASSOCIATES
Tel: +1 619 460 5678    Web: www.oliver.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


On Apr 12, 2005, at 18:48, Craig Bennett wrote:

Hi Kieran,

I got subversion to work alongside UV. There were no real issues. I found that a very flat structure worked best rather than the multi-level repository structures in the SVN docs. This mean't that I could checkout code into a UV account (rather than an entire UV account) and have programs accesible in type 19 files.

Once you checkout files you will need to manually create file pointers (although your could probably examine the subversion .svn working copy administration directory to automate this from BASIC).

I decided that checking in hashed files was probably a bad idea (svn could handle it but you couldn't do a diff or similar against the contents in a useful way).

I only attempted to control program code, not data or dictionaries.


Craig ------- u2-users mailing list [email protected] To unsubscribe please visit http://listserver.u2ug.org/
-------
u2-users mailing list
[email protected]
To unsubscribe please visit http://listserver.u2ug.org/

Reply via email to