Meeta,
We have had to get rather inventive for the same reasons (SOX).
We are controlling it from the OS level (ie; can't clear it if you don't
have write access). We have multiple environments. The production
environment is locked down. The development and staging environments allow
us full access to develop, test and manipulate data. We are using a
product called Remedy to document the changes and change control approvals.
We have a process in place that will implement the changes that can only be
run by certain individuals.
In the event (daily) that we need to make changes in the production
environment, we make a 'FIRECALL' to a dedicated support group that will
give us access.
These processes have been in place for a little while. Auditors come in
March.
Vance Alspach
J & L Industrial Supply
Stu Glancy
<[EMAIL PROTECTED] To:
u2-users@listserver.u2ug.org
es.com> cc:
Sent by: Subject: Re: [U2] [UV]
SOX Compliance and Universe
[EMAIL PROTECTED]
er.u2ug.org
01/27/2005 11:34 AM
Please respond to
u2-users
You can user "R"emote VOC entries on sensitve commands to excute a
security programs to allow or track access.
Meeta Advani wrote:
>Hi all,
>
>The company I work for, Mothers Work Inc., is a publicly held company,
>traded on NASDAQ. As a result, we are obliged to comply with the
>Sarbanes-Oxley Act. I'm sure others of you are in the same position.
>We run our business on a DG-UX machine with Universe 9.411.
>
>The guidance we have been given is that we need to put stronger access
>controls on programmers, track programmer actions, make sure that
>sensitive commands at TCL such as DELETE, CLEAR-FILE, and
>DELETE/FILE/etc. within ED are locked down to a certain extent.
>
>Although we normally do all of our programming in-house, in this case we
>are interested in finding out if there is already a product out there
>(or code that is used internally at some other company) that
>accomplishes this, and works as a wraparound.
>
>If anyone has insight on this or other comments about SOX and the MV
>world, I'd like to hear how you are dealing with this situation.
>
>Thanks,
>Meeta Advani
>
>===============================
>Meeta Advani
>Programmer/Analyst
>Mothers Work, Inc.
>[EMAIL PROTECTED]
[demime 1.01d removed an attachment of type image/gif which had a name of
graycol.gif]
[demime 1.01d removed an attachment of type image/gif which had a name of
ecblank.gif]
[demime 1.01d removed an attachment of type image/gif which had a name of
pic13650.gif]
-------
u2-users mailing list
u2-users@listserver.u2ug.org
To unsubscribe please visit http://listserver.u2ug.org/
