Karl Severson wrote:

>We have to have our systems waivered for one reason: no anti virus software on 
>VM. 

Just ask these auditors this one question: 'Are there ANY vendors for antivirus 
software for these platforms: z/VM and z/OS?'  (I'm not speaking about Linux 
under z/VM and such software inside Linux.)

>Clearly there has to come a time when each platform (Windows, Linux, zVM, 
>etc.) is judged on its own merits but that will probably be too much work and 
>will never happen.

Agreed. In a galaxy far far away, gazillion years ago, some auditors wanted me 
(and my network guys) to ensure that all platforms (Novell LAN, Microsoft LAN, 
OS/390, Windows 98, NT and XP) must have ONE shared grouping of employees, 
accesses, logon restrictions, userid standard and password standard policy...

For example: group X must have Z accesses on certain grouping of 'directory / 
folders' [1] on all these platforms including OS/390!

I gave up... (and these auditors soon gave up too... ;-D )

Groete / Greetings
Elardus Engelbrecht

[1] - I hate mixing of terminology accross platforms. :-/

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to