Re: Sox Pole

  • From: Mohammad Rafiq <rafiq9857@xxxxxxxxx>
  • To: bspears@xxxxxxxxxxxxxxxxx
  • Date: Fri, 29 Oct 2004 12:25:41 -0400

It helped us a lot. Our clients who were even not compromizing in
revoking any privileges from them now asking DBA team to take full
control of even all applications users account. We have around 40 SOX
identified databases to dealt with.

Becuase pressure is coming from top.....Nobody is approving any
exception for such access...

Regards
Rafiq



On Fri, 29 Oct 2004 10:54:47 -0400, Spears, Brian
<bspears@xxxxxxxxxxxxxxxxx> wrote:
> 
> Funny.. Our users have had ALL those privileges removed... Despite huge
> squawking. That has turned out
> To be one good thing SOX has done. Big shops have big ceo that don't want to
> go to jail..so you can expect some tight enforcement on this in the future
> on the finance apps.
> Nice Joke on the SOX :)
> 
> Brian
> 
> 
> -----Original Message-----
> From: Gogala, Mladen [mailto:Mladen.Gogala@xxxxxxxx]
> Sent: Friday, October 29, 2004 10:37 AM
> To: Spears, Brian
> Cc: oracle-l@xxxxxxxxxxxxx
> Subject: RE: Sox Pole
> 
> I must say that I hoped for something to limit the number of privileged
> users in the database. I'm not concerned only with system password but also
> with developers requiring "SELECT ANY TABLE". Unfortunately, SoX does
> nothing about that. It's called the "curse of the SoX". Given the
> circumstances, the curse might be broken soon.
> 
> --
> Mladen Gogala
> A & E TV Network
> Ext. 1216
> 
> > -----Original Message-----
> > From: Spears, Brian [mailto:BSpears@xxxxxxxxxxxxxxxxx]
> > Sent: Friday, October 29, 2004 10:06 AM
> > To: oracle-l@xxxxxxxxxxxxx
> > Subject: Sox Pole
> >
> >
> >
> >  Just wondering if Sarbanes Oxley has reduced people to
> > getting permission for the system password each time from
> > Operations to be able to sign into the production databases?
> > Some real crazy stuff coming out of this.
> >
> > Brian
> >
> > --
> > //www.freelists.org/webpage/oracle-l
> >
> 
> --
> //www.freelists.org/webpage/oracle-l
>
--
//www.freelists.org/webpage/oracle-l

Other related posts: