RS, You are correct a big part of this is the auditors being educated...understanding the installation FULLY and also management ppl who chartered them to do the work...
Sent from my iPad Scott Ford Senior Systems Engineer www.identityforge.com On Mar 27, 2012, at 2:25 PM, "R.S." <[email protected]> wrote: > W dniu 2012-03-27 17:06, Greg Dorner pisze: >> Dear IBM-MAINers, >> >> Our auditors are insisting that we install a product that protects against >> malicious software (viruses, worms, trojans, etc.). >> >> Does anyone know of a product that does this? I heard that McAfee is coming >> out with a z/OS product "later this year", but I called them and they had no >> idea what I was talking about. >> >> z/OS, with proper security controls (and believe me - we have LOTS!) should >> not have to worry about such things, at least that's what I've always heard. >> >> Any input on this topic would be GREATLY appreciated!! > > This is NOT mainframe problem. > > Indeed, you have problem with uneducated auditors. Maybe stupid ones. > Your problem is how to prove that requirement is both stupid and impossible > to fulfill. > > > We can provide you some arguments, like > - there are no such products > - there are no viruses, trojans or other malware for z/OS and it have never > been last 47 years. (I said 'z/OS', so the only VM worm does not count) > - no mainframe installation use such product > - you have RACF *SECURITY SERVER* (or TS or ACF2) > > > -- > Radoslaw Skorupka > Lodz, Poland > > > -- > Tre tej wiadomoci moe zawiera informacje prawnie chronione Banku > przeznaczone wycznie do uytku subowego adresata. Odbiorc moe by > jedynie jej adresat z wyczeniem dostpu osób trzecich. Jeeli nie jeste > adresatem niniejszej wiadomoci lub pracownikiem upowanionym do jej > przekazania adresatowi, informujemy, e jej rozpowszechnianie, kopiowanie, > rozprowadzanie lub inne dziaanie o podobnym charakterze jest prawnie > zabronione i moe by karalne. Jeeli otrzymae t wiadomo omykowo, > prosimy niezwocznie zawiadomi nadawc wysyajc odpowied oraz trwale > usun t wiadomo wczajc w to wszelkie jej kopie wydrukowane lub > zapisane na dysku. > > This e-mail may contain legally privileged information of the Bank and is > intended solely for business use of the addressee. This e-mail may only be > received by the addressee and may not be disclosed to any third parties. If > you are not the intended addressee of this e-mail or the employee authorised > to forward it to the addressee, be advised that any dissemination, copying, > distribution or any other similar activity is legally prohibited and may be > punishable. If you received this e-mail by mistake please advise the sender > immediately by using the reply facility in your e-mail software and delete > permanently this e-mail including any copies of it either printed or saved to > hard drive. > BRE Bank SA, 00-950 Warszawa, ul. Senatorska 18, tel. +48 (22) 829 00 00, fax > +48 (22) 829 00 33, www.brebank.pl, e-mail: [email protected] > Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru > Sdowego, nr rejestru przedsibiorców KRS 0000025237, NIP: 526-021-50-88. > Wedug stanu na dzie 01.01.2012 r. kapita zakadowy BRE Banku SA (w caoci > wpacony) wynosi 168.410.984 zotych. > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
