Griping about auditing (not the Oracle Kind)

From: Miller, Jay <JayMiller_at_tdwaterhouse.com>
Date: Mon, 25 Jun 2001 07:00:25 -0700
Message-ID: <F001.0033659F.20010625063152@fatcity.com>

We've been through an internal audit and I was just wondering if anyone else has to deal with the rather ludicrous requirements I now have. In order to add or resize a datafile I now need to fill out a form and get Senior VP approval and the alert logs must be reviewed every day by a non-DBA in order to be certain that I didn't make any database changes without such approval. The auditors were horrified to discover that not only did I do such things whenever I thought them necessary but that we didn't have a non-DBA review everything I did after an Oracle upgrade to ensure I didn't install any other software.
Fortunately I managed to convince them that yes, I really did need a Unix login (they were skeptical).

So, any similar horror stories?

Jay Miller
Sr. Oracle DBA
--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author: Miller, Jay
  INET: JayMiller_at_TDWaterhouse.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Mon Jun 25 2001 - 09:00:25 CDT