Re: Tough question for oracle DBAs/Solaris Admins. Log shipping.

From: DA Morgan <damorgan_at_psoug.org>
Date: Fri, 01 Sep 2006 19:24:33 -0700
Message-ID: <1157163871.697174@bubbleator.drizzle.com>

Ningi wrote:
> Frank Cusack wrote:
> <snip>
>
> m UNTRUSTED employees, not eliminating trust from the system.

>>
>> No auditor will balk at not having immutable files as long as only 
>> trusted
>> employees are in the position to undetectably alter data.

>
> Yes they will. You stand no chance of meeting SEC 17a-4 if ANYBODY can
> alter the data.
>
> Pete

I'm in complete agreement with Pete and know this is true for a fact after working with several public companies and their auditors.

As an IT employee you have a fiduciary responsibility to your employer to not do things that violate the letter or the spirit of the law. Playing games with phrases like "trusted employees" is semantics only.

Auditors, by definition, don't trust the CEO, COO, CFO, and CTO. So from a SarbOx, FACTA, Basel II, HIPPA, PIPEDA, etc. standpoint there is no such thing as a trusted employee as every employee reports to them.

-- 
Daniel A. Morgan
Puget Sound Oracle Users Group

Received on Fri Sep 01 2006 - 21:24:33 CDT