Issues for the Auditor

Issues for the Auditor

This section contains the following topics:

Introduction

Implementation Queries

Introduction

This guide provides the auditor with the information to maximize the use of CA Top Secret features. This guide identifies:

• Some of the exposures and security deficiencies within IBM z/OS and other vendor products
• Problems that are associated with people as a security risk
• The corrective actions that the author perform

Security administration and auditing are complementary functions. They must be closely coordinated to be effective. Mutual cooperation between these two departments is important because no one department has total jurisdiction over corporate data security.