Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-23 Thread Seymour J Metz
Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of Carmen Vitullo [cvitu...@hughes.net] Sent: Tuesday, February 23, 2021 10:38 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Are these auditors competent? was Re: Anyway to save ISRDDN output? I actually would rather have the IBM folks come in an

Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-23 Thread Bill Johnson
Most IT auditors I've dealt with recently cut their IT teeth on non-mainframe platforms and have no clue as to how the mainframe works. Therefore, they push for rules that are silly, limit productivity, and even create exposures that don't exist on the mainframe. Even the young one I worked wit

Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-23 Thread Chris Hoelscher
, February 23, 2021 11:48 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: [IBM-MAIN] Are these auditors competent? was Re: Anyway to save ISRDDN output? [External Email: Use caution with links and attachments] I worked for a company 30 years ago that at the time was part of the largest fraud in

Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-23 Thread ITschak Mugzach
Nice story. However I think the discussion is limited to IT status auditing. ITschak ITschak Mugzach *|** IronSphere Platform* *|* *Information Security Continuous Monitoring for z/OS, x/Linux & IBM I **| z/VM coming soon * On Tue, Feb 23, 2021 at 6:49 PM Bill Johnson < 0047540adefe-dmar

Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-23 Thread Bill Johnson
I worked for a company 30 years ago that at the time was part of the largest fraud in corporate history. The CEO and executives had 2 sets of books. The auditors were actively involved with the fraud. Anyone who has been around for a few decades remembers that a number of the big 6 auditing fir

Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-23 Thread Carmen Vitullo
3 February 2021 9:26 AM CST Subject: Re: Are these auditors competent? was Re: Anyway to save ISRDDN output? Your faux auditors may be a RPITA, but a *qualified* auditor is a joy forever, should you be so fortunate as to be audited by one. They will find things that actually do need fixing, and wi

Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-23 Thread Radoslaw Skorupka
W dniu 23.02.2021 o 00:44, Radoslaw Skorupka pisze: W dniu 21.02.2021 o 19:55, Paul Gilmartin pisze: On Sun, 21 Feb 2021 18:23:03 +0100, Radoslaw Skorupka wrote:     ... When the only tool you've mastered is printscreen, everything looks like a bitmap. That was the requirement: to make Windows

Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-23 Thread Seymour J Metz
mainframe because most of these guys were SYSPROGS at one time Carmen Vitullo -Original Message- From: Radoslaw To: IBM-MAIN Date: Monday, 22 February 2021 5:45 PM CST Subject: Re: Are these auditors competent? was Re: Anyway to save ISRDDN output? W dniu 21.02.2021 o 19:55, Paul Gilma

Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-23 Thread Carmen Vitullo
these guys were SYSPROGS at one time   Carmen Vitullo -Original Message- From: Radoslaw To: IBM-MAIN Date: Monday, 22 February 2021 5:45 PM CST Subject: Re: Are these auditors competent? was Re: Anyway to save ISRDDN output? W dniu 21.02.2021 o 19:55, Paul Gilmartin pisze: &g

Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-22 Thread Paul Gilmartin
On Tue, 23 Feb 2021 00:44:06 +0100, Radoslaw Skorupka wrote: > >No! >No, and no! >You assumed the auditor know the details and understand what emulator is. >That's plain wrong. >I learnt many years ago such auditors are uneducated, but they mask >their ignorancy with some mask. This is complex topi

Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-22 Thread Radoslaw Skorupka
W dniu 21.02.2021 o 19:55, Paul Gilmartin pisze: On Sun, 21 Feb 2021 18:23:03 +0100, Radoslaw Skorupka wrote: ... When the only tool you've mastered is printscreen, everything looks like a bitmap. That was the requirement: to make Windows printscreen - a bitmap. Did I forgot to mention it's

Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-21 Thread Paul Gilmartin
On Sun, 21 Feb 2021 18:23:03 +0100, Radoslaw Skorupka wrote: >>... >> When the only tool you've mastered is printscreen, everything >> looks like a bitmap. > >That was the requirement: to make Windows printscreen - a bitmap. >Did I forgot to mention it's plain stupid? > You mentioned that the

Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-21 Thread Radoslaw Skorupka
W dniu 21.02.2021 o 00:02, Paul Gilmartin pisze: On Sat, 20 Feb 2021 23:21:11 +0100, Radoslaw Skorupka wrote: ... In this case it had to be Windows printscreen, full screen, so it can be x3270, Tom Brennan Vista, PCOMM, Notepad, Paint, whatever. The result is always a bitmap. x3270 can sav

Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-20 Thread Paul Gilmartin
On Sat, 20 Feb 2021 23:21:11 +0100, Radoslaw Skorupka wrote: >... >In this case it had to be Windows printscreen, full screen, so it can be >x3270, Tom Brennan Vista, PCOMM, Notepad, Paint, whatever. The result is >always a bitmap. > x3270 can save as text or HTML. The HTML is an excellent ful

Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-20 Thread Radoslaw Skorupka
W dniu 20.02.2021 o 20:32, Paul Gilmartin pisze: On Sat, 20 Feb 2021 10:42:37 -0800, Tom Brennan wrote: It's irritating that some users report problems and supply graphic screenshots as documentation. For mainframe issues at the terminal, sure. But in other cases I might want an image, such as

Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-20 Thread Radoslaw Skorupka
W dniu 20.02.2021 o 19:03, Paul Gilmartin pisze: On Sat, 20 Feb 2021 16:42:01 +0100, Radoslaw Skorupka wrote: ... b) screenshot series is completely useless for browsing or searching some string. Depends. x3270 can capture screen content as either text or impressively realistic HTML; both

Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-20 Thread Itschak Mugzach
For 30+ years I perform security assessments, status audits, readiness reviews, pentest (call it as you like). I've NEVER (!) interviewed a person, or asked him for a screenshot. give me a standard user (for phase one) and one with ROAUDIT (for phase two). The system knows better how it is configed

Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-20 Thread Gibney, Dave
The HMC has a browser interface, not TN3270 > -Original Message- > From: IBM Mainframe Discussion List On > Behalf Of Paul Gilmartin > Sent: Saturday, February 20, 2021 11:32 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Are these auditors competent? was Re: Any

Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-20 Thread Paul Gilmartin
On Sat, 20 Feb 2021 10:42:37 -0800, Tom Brennan wrote: >> >> It's irritating that some users report problems and supply graphic >> screenshots as documentation. > >For mainframe issues at the terminal, sure. But in other cases I might >want an image, such as last week with a new z15 that wouldn't

Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-20 Thread Tom Brennan
On 2/20/2021 10:03 AM, Paul Gilmartin wrote: It's irritating that some users report problems and supply graphic screenshots as documentation. For mainframe issues at the terminal, sure. But in other cases I might want an image, such as last week with a new z15 that wouldn't IPL and I asked

Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-20 Thread Paul Gilmartin
On Sat, 20 Feb 2021 16:42:01 +0100, Radoslaw Skorupka wrote: >... >b) screenshot series is completely useless for browsing or searching >some string. > Depends. x3270 can capture screen content as either text or impressively realistic HTML; both quite browsable/searchable. (But does that vio

Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-20 Thread Radoslaw Skorupka
W dniu 19.02.2021 o 00:12, Frank Swarbrick pisze: Who audits the auditors? :-) I think this is really important and it will take place in the future. Or just some feedback process to report formal objections about the auditor and his incompetence. I met a lot of auditors and unfortunately I o

Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-19 Thread Carmen Vitullo
: Thursday, February 18, 2021 5:01 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Are these auditors competent? was Re: Anyway to save ISRDDN output? [Default] On 18 Feb 2021 05:12:25 -0800, in bit.listserv.ibm-main cvitu...@hughes.net (Carmen Vitullo) wrote: >I actually like the IBM health checker idea

Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-19 Thread Seymour J Metz
To: IBM-MAIN@LISTSERV.UA.EDU Subject: Are these auditors competent? was Re: Anyway to save ISRDDN output? [Default] On 18 Feb 2021 05:12:25 -0800, in bit.listserv.ibm-main cvitu...@hughes.net (Carmen Vitullo) wrote: >I actually like the IBM health checker idea, I know I've been told

Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-19 Thread Carmen Vitullo
Indeed Frank, like the Skype message I have for work, "who's watching the Watchers ?" :)   Carmen Vitullo -Original Message- From: Frank To: IBM-MAIN Date: Thursday, 18 February 2021 5:12 PM CST Subject: Re: Are these auditors competent? was Re: Anyway to sav

Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-18 Thread Frank Swarbrick
Who audits the auditors? :-) From: IBM Mainframe Discussion List on behalf of Clark Morris Sent: Thursday, February 18, 2021 3:01 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Are these auditors competent? was Re: Anyway to save ISRDDN output? [Default] On 18 Feb

Re: Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-18 Thread Mark Jacobs
Also note unless you're protecting the CSVAPF.** resource, whatever method you're using to obtain the list of APF authorized datasets, it's just a snapshot in time, and can change unknowingly. Mark Jacobs Sent from ProtonMail, Swiss-based encrypted email. GPG Public Key - https://api.protonma

Are these auditors competent? was Re: Anyway to save ISRDDN output?

2021-02-18 Thread Clark Morris
[Default] On 18 Feb 2021 05:12:25 -0800, in bit.listserv.ibm-main cvitu...@hughes.net (Carmen Vitullo) wrote: >I actually like the IBM health checker idea, I know I've been told over and >over it needs to be ISRDDN, but I really think it's because that's all they >know, they are lazy to say the