Focusing on mainframe shops I've got to admit, very often there is no
position even for auditor, so "auditor role" is maintained by
...security administrator.
I can't quote the Latin (I took French) but the famous Latin quote
translates to something like "who shall guard those selfsame guardians",
i.e., who is watching the security administrator? That's like asking a
programmer to do a review of his/her own code.
I am no fan of typical auditors, but a good, educated and intelligent
auditor can be a great benefit to a company.
--
Bruce A. Black
Senior Software Developer for FDR
Innovation Data Processing 973-890-7300
personal: [EMAIL PROTECTED]
sales info: [EMAIL PROTECTED]
tech support: [EMAIL PROTECTED]
web: www.innovationdp.fdr.com
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html