Another important issue with autostart jobs is to ensure the password is controlled by your information security system, not an embedded password in the startup control language. The user account should NEVER use a default setup, especially one supplied by the vendor. Also, consider logging the use of the account and subsequent review of its use along with other autostart jobs. This would identify any abnormal use of the user account by other than an autostart job or use outside of its normal business hours.
-----Original Message-----
From: Stan Dormer [SMTP:[EMAIL PROTECTED]]
Sent: Friday, February 22, 2002 6:01 AM
To: 'BRET CARPENTER'; [EMAIL PROTECTED]
Subject: RE: IT Automated/Robot Jobs
For all auto-scheduled jobs check the user account in which the job is started up. In most systems the security profile for an autoscheduled job can either be a nominated purpose built user account or (default) a root, superuser or adminstrator level account.
�
As the job will start up in the security context of the assigned account you need to ensure that an autostart fires up in the lowest degree of priviledge necessary to enable it to run successfully.
�
Regards
Stan Dormer
www.ink-e-media.com <http://www.ink-e-media.com>
�
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of BRET CARPENTER
Sent: 21 February 2002 19:40
To: [EMAIL PROTECTED]
Subject: IT Automated/Robot Jobs
Fellow Auditors:
�
Has anybody ever done an audit on their "automated/robot" IT jobs.� I have found some issues where the "automated" jobs require the operator to input data (i.e. dates) to run the job.� In this case if the date is not keyed incorrectly the Job will run, but with the incorrect data.� I am now looking for compensating controls on this particular issue which is not a problem.� However, are there any other issues that you can suggest I look at when it comes to "automated" jobs run by IT operators or the system itself.� Any comments, concerns�or programs would be much appreciated.
�
Thanks,
�
Bret Carpenter
Office 1-740-322-5660
Fax 1-740-322-5034
[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
�
�
***********************************************************************
This electronic message may contain information that is confidential and/or legally privileged. It is intended only for the use of the individual(s) and entity named as recipients in the message. If you are not an intended recipient of this message, please notify the sender immediately and delete the material from any computer. Do not deliver, distribute or copy this message, and do not disclose its contents or take any action in reliance on the information it contains. Thank you.
