Top Ten z-OS and RACF Audit Findings

Vanguard’s “Top Ten”z/OS & RACF Audit Findings Philip EmrichSenior Professional Services ConsultantVanguard Integrity Professionals, Inc. Federation of Security Professionals Fall SeminarToronto, Ontario03 October 2008©2008 Vanguard Integrity Professionals, Inc. 1Trademarks • The following are trademarks or registered trademarks of the International ®Business Machines Corporation (IBM) or subsidiaries– IBM®, CICS®, DB2®, Tivoli®, zSeries®, – z/OS®, OS/390®, MVS, MVS/ESA, MVS/XA– RACF®, SecureWay®, Security Server• The following are trademarks and service marks of Vanguard Integrity ™Professionals – Nevada (VANGUARD)– Vanguard Administrator™, Vanguard Advisor™, Vanguard Analyzer™– Vanguard Enforcer™, SecurityCenter™, ez/Integrator ™, ez/AccessControl™, ez/SignOn ™, ez/Token ™, PasswordReset ™, INCompliance ™– SmartLink™, Find-it-Fix-it-Fast™, RiskMinder™, SmartAssist™, eDistribution™• Microsoft®, Windows, and the Windows logo are trademarks of Microsoft®• Java™ and all Java-based trademarks are trademarks of Sun Microsystems, Inc.• UNIX® is a registered trademark in the United States and other countries licensed exclusively through The Open Group• CA-ACF2®, CA- Top Secret® are trademarks of Computer Associates International. • Other company, product, and service names may be the trademarks or service marks of others in the United States, other countries, or both©2008 Vanguard Integrity Professionals, Inc. 2Agenda• The Need to Implement ...