6 replies
by tbragsda
.
AnD nothing new. You expect that have all their ducks in a row, but they just don't. Now as far as audits go, they SHOULD coach you. You will get asked questions that will trick-up a audit, and you may not notice. You may not realy know the reason for the question.
I don't know the bank, or situation you are working in, but I don't get supprised at much of anything when it comes to large networks, and lack of real control.
TBR
Not in banking, but in a recent audit, one employee showing the auditor the system for managing IT/Engineering effort had to explain how he wasn't authorized to do the function the chap wanted demonstrating.
Fortunately he saved the day, by logging on as his boss. !!!!!!
Need a new coach.
by jessie
Yeah... that's what we want the auditors to see... that we give other people our passwords and let them use our accounts at will!!!
And did your company "flunk" it's audit?
by operations
it was considered a minor non-compliance.
By the auditor anyway, thankfully
is food chain based, the data isn't secret. This is a manufacturing business, so all the guy did was go one level up in spend approval for spends in a certain range.
The environment this sort of thing occurs in though, is not desirable from an Audit trail perspective, but it isn't business critical.
A lot of the passwords in manufacturing environments are functionally based as opposed to persoanl. Locking a needed operator out of the system is considered far more of a problem than finding out who logged onto what and did what. Particularly if passwords were personal in some areas they'd have to have 24 hour support for guys to to be able to operate the plant having forgot their password.
Safety, Quality, Production then IT is the way it has to be.
This discussion is closed to new replies.
Trending Community archive posts
Sort by Trending