Log in
::
Register
::
Not logged in
Home
Tags
Articles
Editorials
Stairways
Forums
Scripts
Videos
Blogs
QotD
Books
Ask SSC
SQL Jobs
Training
Authors
About us
Contact us
Newsletters
Write for us
Recent Posts
Recent Posts
Popular Topics
Popular Topics
Home
Search
Members
Calendar
Who's On
Home
»
Article Discussions
»
Article Discussions by Author
»
Discuss Content Posted by Brandie Tarvin
»
Working Your SOX Off
11 posts, Page 2 of 2
««
1
2
Working Your SOX Off
Rate Topic
Display Mode
Topic Options
Author
Message
Liliya Huff
Liliya Huff
Posted Thursday, October 04, 2007 8:34 AM
SSC Journeyman
Group: General Forum Members
Last Login: Saturday, March 14, 2009 5:17 PM
Points: 85,
Visits: 63
Brandie Tarvin (10/3/2007)
Liliya,
None of the local department ITS support groups in my workplace have actually been asked for Active Directory or Windows Groups lists. Usually, the auditors go to the ITS group that manages Active Directory. I don't know if these people are a part of our Server Admin team or have their own "AD Team" collection, but in my experience, they are the ones the auditors contact when wanting a list of all the users associated with specific Windows Groups.
forgotten to comment on this part.
depends how many years did your company go through and how exactly the auditors can match database logins and groups no matter when are they coming from with the job responsibilities of particular individuals. On 3-rd year and so on you may expect a bit smarter auditors. Does not mean you can not let the auditors to discover the security problems already known or new ones... (make it a little bit difficult to put all the ends together and give the info from different departments is one of the ways to do it, buys you some time because it takes time to analyze the data)
Post #406825
« Prev Topic
|
Next Topic »
11 posts, Page 2 of 2
««
1
2
Permissions
You
cannot
post new topics.
You
cannot
post topic replies.
You
cannot
post new polls.
You
cannot
post replies to polls.
You
cannot
edit your own topics.
You
cannot
delete your own topics.
You
cannot
edit other topics.
You
cannot
delete other topics.
You
cannot
edit your own posts.
You
cannot
edit other posts.
You
cannot
delete your own posts.
You
cannot
delete other posts.
You
cannot
post events.
You
cannot
edit your own events.
You
cannot
edit other events.
You
cannot
delete your own events.
You
cannot
delete other events.
You
cannot
send private messages.
You
cannot
send emails.
You
may
read topics.
You
cannot
rate topics.
You
cannot
vote within polls.
You
cannot
upload attachments.
You
may
download attachments.
You
cannot
post HTML code.
You
cannot
edit HTML code.
You
cannot
post IFCode.
You
cannot
post JavaScript.
You
cannot
post EmotIcons.
You
cannot
post or upload images.
Copyright © 2002-2013 Simple Talk Publishing. All Rights Reserved.
Privacy Policy.
Terms of Use.
Report Abuse.