It seems to me that most of the auditors I encounter are fresh out of college. Perhaps auditing is a sort of boot-camp for young accountants. My impression is that they are given a book to follow, and as long as they follow the book they are safe. No independent thinking allowed. Come to think of it, we have no "anti-virus" on zOS either... does RACF count? Probably not in the book.
From: Karl Severson <[email protected]> To: [email protected] Date: 08/16/2012 08:44 AM Subject: Re: Auditors Don't Know Squat! Sent by: IBM Mainframe Discussion List <[email protected]> We have to have our systems waivered for one reason: no anti virus software on VM. No matter that passwords can be encrypted or that we can have 200 character password phrasing (current requirement 16 characters) or that no one writes viruses for VM or that we aren't connected to the Internet. Clearly there has to come a time when each platform (Windows, Linux, zVM, etc.) is judged on its own merits but that will probably be too much work and will never happen. Karl Severson Raytheon Company ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
