SYSADM and Security

[Mark Staples <MSTAPLES () MAIL MCG EDU>]

I've been wondering what other institutions are doing about system
accounts (i.e. sysadm with PeopleSoft) that have full administrative
access and can be used by any DBA, which then impacts effective
monitoring and accountability.

I'm being told that there is no way around the regular use of these
type of accounts and I need to accept the risk and trust our DBAs.
While I "believe" what I'm being told, I'd like to find out what other
institutions are doing to address the use of system accounts.

Thanks!

Mark


-----
Mark Staples
Director of Information Security/Chief Information Security Officer
IT Research Liaison
Medical College of Georgia
Office: 706-721-1577
FAX: 706-721-7296
mstaples () mcg edu

--------

All information in the communication, including attachments, is
strictly confidential and intended solely for delivery to the
addressee(s) identified above (ie, To/cc/bc), and may contain
privileged, confidential, proprietary and /or intellectual property
entitled to protection from disclosure under applicable law.  If you are
not the intended recipient, please take note that any use, distribution
or copying of this communication is unauthorized and may be unlawful.
If you have received this communication in error, please notify the
sender, delete this correspondence from your computer, and destroy any
printed copies of this communication.

Attachment: Staples-MCG.vcf
Description: