> -----Original Message-----
> From: IBM Mainframe Discussion List On Behalf Of Doc Farmer
>
> Okay, this one came to me yesterday. Somebody asked me if there were
a way
> to search all files on a mainframe for credit card number information
(you
> know, the 16-digit jobs) for a PCI audit.
>
> I know, I know, it could be 16 Alphanumeric, 16 Numeric, 9 Packed
Decimal,
> or 8 Binary. I also know it would require searching EVERY file, and
would
> probably need to use "test" card numbers in order to determine if they
> really exist.
>
> However, for some reason they want to know if a scanner is available.
I'm
> figuring this could be done with ISPF's SuperC, or with CA-Easytrieve
or
> CA-PanAudit, but if anybody knows of a PCI scanner for z/OS, I'd
appreciate
> some names/links. Many thanks.
In the most general sense, a utility like File-Aid, IBM File Manager, et
al could be considered such a "scanner". One should probably include
such CBTTAPE utilities as DEBE.
I suppose "they" also would want uncataloged datasets, z/OS UNIX files,
tapes, etc. included in the potential universe.
It might be "interesting" to see how one might detect and handle false
positives from such a scan....
-jc-
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
