Implement a RACF program control rule - if that is really what they want you to do. You'll have everybody screaming, but you prevented the unauthorized execution of programs.
Jerry Whitteridge Lead Systems Programmer Safeway Inc. 925 951 4184 If you feel in control you just aren't going fast enough. -----Original Message----- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Greg Dorner Sent: Wednesday, September 05, 2012 5:22 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Preventing the installation of "unapproved" software Man, the auditors came up with a new one! "Gap noted. Automated controls to prevent the installation of unapproved software were not documented." So I have been assigned the task of researching how to provide "Automated controls to prevent the installation of unapproved software". I'm hoping someone on the list has a clue to what could possibly do this. My brain already hurts thinking about it. Just thinking logically with my limited intellect tells me doing this is somewhat close to impossible. Any thoughts? I also accept rants and expletives. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN "Email Firewall" made the following annotations. ------------------------------------------------------------------------------ Warning: All e-mail sent to this address will be received by the corporate e-mail system, and is subject to archival and review by someone other than the recipient. This e-mail may contain proprietary information and is intended only for the use of the intended recipient(s). If the reader of this message is not the intended recipient(s), you are notified that you have received this message in error and that any review, dissemination, distribution or copying of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately. ============================================================================== ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN