[Default] On 17 Feb 2021 11:18:10 -0800, in bit.listserv.ibm-main [email protected] (Carmen Vitullo) wrote:
>you took the words right out of my mouth, I told our team auditor rep to ask >them, "how to we use ISRDDN and provide the output you require", unfortunately >this person is afraid to rock the boat, I on the other hand had some good >teachers and was taught I need to be a pain, be a fly in the ointment ! > Based on this thread, I seriously doubt that these auditors are capable of doing a competent job of assessing risk. You could spoof ISRDDN by using a STEPLIB in the logon PROC. I would trust a console display of D PROG,APF,ALL more. Incidentally what is the status of modules? They remind me of an auditor who in the 1980s after being told we had effectively no security (by me and then my boss who put it in management terms) was more concerned with the fact we were running JES3 on a single computer system. It might be worthwhile to research this company. Clark Morris > >Carmen Vitullo > > > >-----Original Message----- > >From: Lizette <[email protected]> >To: IBM-MAIN <[email protected]> >Date: Wednesday, 17 February 2021 1:09 PM CST >Subject: Re: Anyway to save ISRDDN output? > >Then I would go back and say > >Please provide your tool to do this, as you do not want to trust one of mine > > > >-----Original Message----- >From: IBM Mainframe Discussion List <[email protected]> On Behalf Of >Carmen Vitullo >Sent: Wednesday, February 17, 2021 11:59 AM >To: [email protected] >Subject: Re: Anyway to save ISRDDN output? > >Lizette, you are absolutely correct and this is one of the options I provided, >the only problem, the HITRUST contractor(s) tell us what commands, what tools >to use to provide them what they require. >they require us to use ISRDDN, any other tool or command, in their eye's can >be spoofed, faked > >Carmen Vitullo > > > >-----Original Message----- > >From: Lizette <[email protected]> >To: IBM-MAIN <[email protected]> >Date: Wednesday, 17 February 2021 12:49 PM CST >Subject: Re: Anyway to save ISRDDN output? > >Why not go to SDSF APF and list there? > >Or maybe in SDSF use CK and go to APF Health Check details. > >You can use either depending on what your Auditors need. > >The APF in SDSF can probably be captured with an ISFEXEC function. > >Lizette > > > >-----Original Message----- >From: IBM Mainframe Discussion List <[email protected]> On Behalf Of >Carmen Vitullo >Sent: Wednesday, February 17, 2021 7:45 AM >To: [email protected] >Subject: Anyway to save ISRDDN output? > >We have a HI TRUST requirement to use ISRDDN (only) to report on APF datasets >and other system information. Is there a way to invoke ISRDDN and save the >output to a dataset? >We've tried ISRDDN APF then save but it does not provide the APF info I >requested. reading the find manual I don't see any options to allow us to save >the output, any ideas? >thanks > >---------------------------------------------------------------------- >For IBM-MAIN subscribe / signoff / archive access instructions, send email to >[email protected] with the message: INFO IBM-MAIN > >---------------------------------------------------------------------- >For IBM-MAIN subscribe / signoff / archive access instructions, >send email to [email protected] with the message: INFO IBM-MAIN > >---------------------------------------------------------------------- >For IBM-MAIN subscribe / signoff / archive access instructions, send email to >[email protected] with the message: INFO IBM-MAIN > >---------------------------------------------------------------------- >For IBM-MAIN subscribe / signoff / archive access instructions, >send email to [email protected] with the message: INFO IBM-MAIN > >---------------------------------------------------------------------- >For IBM-MAIN subscribe / signoff / archive access instructions, >send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
