Does unauthorized include in-house written for personal use? i.e. not directed 
to be written by local management.

I *HATE* checklist auditors. This sounds like a WINTEL based checklist....

Were it in my power, I would have the auditing firm fired.
 Your company is paying for expertise and it has been demonstrated that there 
is no expertise present on this engagement.

<snip>
> Man, the auditors came up with a new one!
>
> "Gap noted. Automated controls to prevent the installation of 
> unapproved software were not documented."
>
> So I have been assigned the task of researching how to provide 
> "Automated controls to prevent the installation of unapproved 
> software".
>
> I'm hoping someone on the list has a clue to what could possibly do 
> this. My brain already hurts thinking about it. Just thinking 
> logically with my limited intellect tells me doing this is somewhat 
> close to impossible.
</snip>

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to