Re: Griping about auditing (not the Oracle Kind)

From: <nlzanen1_at_EY.NL>
Date: Mon, 25 Jun 2001 07:47:36 -0700
Message-ID: <F001.00336760.20010625072238@fatcity.com>

Hi,

Been there recently

We had change management here breathing down our necks at one point. They wanted everything documented and approved. I flooded them with change request forms (even for changing a users password on the test database) and within two days they wanted a meeting about what we ,DBA's, thought should be approved and documented.

We now only have to make sure no other stuff is scheduled by the UNIX boys on the same machine if we do something that could conflict with OS stuff.

Jack

PS: The funniest thing is that the reviewers in general have no clue about what's going on.

                                                                                       
                              
                    "Miller, Jay"                                                      
                              
                    <JayMiller_at_TDWater       To:     Multiple recipients of list 
ORACLE-L <ORACLE-L_at_fatcity.com>     
                    house.com>               cc:     (bcc: Jack van 
Zanen/nlzanen1/External/MEY/NL)                  
                    Sent by:                 Subject:     Griping about auditing (not 
the Oracle Kind)               
                    root_at_fatcity.com                                                   
                              
                                                                                       
                              
                                                                                       
                              
                    25-06-2001 16:31                                                   
                              
                    Please respond to                                                  
                              
                    ORACLE-L

We've been through an internal audit and I was just wondering if anyone else
has to deal with the rather ludicrous requirements I now have. In order to add or resize a datafile I now need to fill out a form and get Senior VP approval and the alert logs must be reviewed every day by a non-DBA in order
to be certain that I didn't make any database changes without such approval.
The auditors were horrified to discover that not only did I do such things whenever I thought them necessary but that we didn't have a non-DBA review everything I did after an Oracle upgrade to ensure I didn't install any other software.
Fortunately I managed to convince them that yes, I really did need a Unix login (they were skeptical).

So, any similar horror stories?

Jay Miller
Sr. Oracle DBA
--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author: Miller, Jay
INET: JayMiller_at_TDWaterhouse.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists


--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message

to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).

De informatie verzonden in dit e-mailbericht is vertrouwelijk en is uitsluitend bestemd voor de geadresseerde. Openbaarmaking, vermenigvuldiging, verspreiding en/of verstrekking van deze informatie aan derden is, behoudens voorafgaande schriftelijke toestemming van Ernst & Young, niet toegestaan. Ernst & Young staat niet in voor de juiste en volledige overbrenging van de inhoud van een verzonden e-mailbericht, noch voor tijdige ontvangst daarvan. Ernst & Young kan niet garanderen dat een verzonden e-mailbericht vrij is van virussen, noch dat e-mailberichten worden overgebracht zonder inbreuk of tussenkomst van onbevoegde derden.

Indien bovenstaand e-mailbericht niet aan u is gericht, verzoeken wij u vriendelijk doch dringend het e-mailbericht te retourneren aan de verzender en het origineel en eventuele kopieën te verwijderen en te vernietigen.

Ernst & Young hanteert bij de uitoefening van haar werkzaamheden algemene voorwaarden, waarin een beperking van aansprakelijkheid is opgenomen. De algemene voorwaarden worden u op verzoek kosteloos toegezonden.

The information contained in this communication is confidential and is intended solely for the use of the individual or entity to whom it is addressed. You should not copy, disclose or distribute this communication without the authority of Ernst & Young. Ernst & Young is neither liable for the proper and complete transmission of the information contained in this communication nor for any delay in its receipt. Ernst & Young does not guarantee that the integrity of this communication has been maintained nor that the communication is free of viruses, interceptions or interference.

If you are not the intended recipient of this communication please return the communication to the sender and delete and destroy all copies.

In carrying out its engagements, Ernst & Young applies general terms and conditions, which contain a clause that limits its liability. A copy of these terms and conditions is available on request free of charge.

--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author:
INET: nlzanen1_at_EY.NL

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists


--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message