Our security & control is weak. The application development has created multiple user id for some users. When a user leaves the company, they revoke his user but NEVER remove the ID for audit trail. On top, it looks like the application development is building a how to for RACF around their application. In real world, this is not right. I am looking for something that shows the best practice in how to setup racf and how to maintain racf. Also, should their be olny one ID per user? What if the same person works in multiple department? Any help would be appreciated
Software/Hardware used:
ASKED:
February 6, 2008 3:31 AM