Production abends caused by security violations can occur at any time and when least expected. They can occur if someone has revised a procedure without requesting the appropriate CA Top Secret definition revisions, or if an untested change to a CA Top Secret definition has been made. In any event, the appropriate authority must be available at all times to make the production piece operational.
If production problems occur during working hours, the security administration staff must be prepared to respond to emergency production problems so as to not impact the production schedule. At least one member of the security administration staff must be available at all times to analyze and resolve the problem as quickly as possible.
For production problems occurring after normal working hours, special “emergency” ACIDs can be defined. These User ACIDs are permitted extensive access to production resources but must be audited. Administrative procedures must be set up to tightly control the use of these ACIDs. Considerations include who are given access to the passwords, how often they are changed, and who is responsible for reviewing audit reports, etc.
|
Copyright © 2014 CA Technologies.
All rights reserved.
|
|