Introduction to data center personnel. Explain the purpose, scope, and methodology of the review.

Obtain a work area and TSO terminal.

Verify the availability of z/OS and ISPF/PDF.

Obtain a user ID with read‑access authority to the APF libraries, the system linklist libraries, the SYS1 prefix files, the logical Parmlib libraries, and the PASSWORD file.

Interview the technical support staff and prepare a work paper that documents the organization’s structure.

Ask the technical support staff to complete the Computer System Profile later in this chapter and return it to you.

Obtain copies of all forms, standards, and procedures that data center personnel use.

Prepare a work paper that details the change control procedures in use. Be specific about the steps of the promotion‑to‑production process and the controls used.

Document the extent of owner‑user‑custodian relationship in use by the data center and its users.

Document what separation of function exists in the technical support staff. Determine if access is permitted on a need‑to‑know basis.

Review previous audit work papers and note follow‑up items for the current review.

Complete the personnel and section assignment control sheets as required.

Use the section status control sheet to monitor the progress of the review.