Re: zOS and USERID's

"I am unsure what an auditor it thinking." I have been in the mainframe field almost 43 years and I have yet to understand what an auditor is thinking. Common sense and forethought do not seem to be a requirement for being an IT auditor. Bobbie Justice Senior z/OS Systems Engineer

Re: zOS and USERID's

that we may correct our internal records. Please then delete the original message (including any attachments) in its entirety. Thank you -Original Message- From: "Walt Farrell" <walt.farr...@gmail.com> Sent: Thursday, December 8, 2016 10:27am To: IBM-MAIN@LISTSERV.UA.EDU

Re: zOS and USERID's

On Thu, 8 Dec 2016 09:52:09 -0500, Steve wrote: >When a system is IPL'g, several SYSTEM level tasks are started before the ACP. > >The auditors are pushing to give CONSOLE, CATALOG, SMS, their own STCID's. Yes, there are address spaces that start before security

Re: zOS and USERID's

Heh, as soon as I saw "I am unsure what an auditor it thinking" I knew we'd get a rant from someone, John! Not disagreeing, mind... On Thu, Dec 8, 2016 at 10:17 AM, John McKown wrote: > On Thu, Dec 8, 2016 at 9:09 AM, Lizette Koehler >

Re: zOS and USERID's

On Thu, Dec 8, 2016 at 9:09 AM, Lizette Koehler wrote: > I think those tasks setup up themselves at IPL Time with the Security > levels they need and may not do much with the SAF. I am unsure what an > auditor it thinking. > ​In my experience, the auditors in the field

Re: zOS and USERID's

the auditor happy and it causes no harm, why not? Lizette > -Original Message- > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On > Behalf Of Steve > Sent: Thursday, December 08, 2016 7:52 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject

zOS and USERID's

When a system is IPL'g, several SYSTEM level tasks are started before the ACP. The auditors are pushing to give CONSOLE, CATALOG, SMS, their own STCID's. Normally I would turn away their finding as they are not needed, and not used. IS there any reason to put in an ID other than to