"This sort of documentation will help auditors better understand the IBM i, and system administrators better explain details to the auditors. All in all, this will help save everyone's time in the risk assessment portion of a security audit," says Woodbury.
SkyView Risk Assessor for i5/OS and OS/400 is a diagnostic tool that compares your i5/OS security configuration to "security best practices." Designed by Woodbury, an iSeries security expert, the product automates the gathering and analysis of essential security configuration information for IT security audits. Risk Assessor documents your system's security configuration, comparing it to security best practices, analyzes and interprets your risks, and shows you how to remediate the issues.
Risk Assessor gathers security information from more than 100 "risk points" across i5/OS, including 20 different points regarding users on the system, 10 points covering object level authority, 40 points covering system values, 9 points covering exit programs, and 25 points of other considerations including adopted authority, authorization lists and more.
Once the information is gathered, Risk Assessor provides a comprehensive "Assessment Guide" that tells you why an issue it found was raised as a security concern, what things you need to consider before making any changes, and how you could approach "fixing" the issues that have been found.
"The focus on PCI is really going to help our customers and increase the product's appeal in the marketplace," says Woodbury. "Beyond that, we've heard from our customers that it would be really nice if reports could be automatically emailed off the system after they were generated. Well we've answered that by incorporating emailing capabilities in this release as well. As we said many times, our goal is to continually improve our products to help our customers cut down the amount of time spent on all the duties that fall under compliance. Performing regular risk assessments is just one of those duties and Risk Assessor is the right tool for that job," says Woodbury.
General availability of this new release, which runs on V5R1 or later, is set for April 17.
About SkyView Partners
SkyView Partners, Inc is a security specialty firm working with IBM i (AS/400, iSeries and System i ) customers and business partners to architect and implement sound security policies and practices for IBM i (i5/OS). SkyView Partners is headed by Carol Woodbury, former chief engineering manager and security architect for the IBM iSeries product line. SkyView Partners is committed to delivering security compliance products and services that provide its customers with sound advice, save them time, and reduce the costs and complexities of attaining and maintaining compliance. To learn more, visit the SkyView Partners Web site at http://www.skyviewpartners.com/.