| Author |
Message
|
| nshad007 |
 Posted: Tue Jan 22, 2013 10:40 am Post subject: How to conduct review and Audit of IBM Message Broker and MQ |
 |
|
Newbie
Joined: 22 Jan 2013
Posts: 6
|
| I am tasked to conduct an audit an EAI with IBM MQ and Broker platform. Can any one provide a Audit program or check list. |
|
| Back to top |
|
 |
| elkinsc |
| Posted: Tue Jan 22, 2013 11:28 am Post subject: |
|
|
Centurion
Joined: 29 Dec 2004
Posts: 138
Location: Indy
|
|
| Back to top |
|
|
| Vitor |
| Posted: Tue Jan 22, 2013 11:39 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| elkinsc wrote: |
| Dear lord have mercy. |
@nshad007 - do you want use to do your job for you, or do you have insufficient experience with WMB to perform the task. If the latter, how did you get the task & why did you accept it?
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| nshad007 |
| Posted: Tue Jan 22, 2013 12:24 pm Post subject: |
|
|
Newbie
Joined: 22 Jan 2013
Posts: 6
|
| Boss, I was just checking if there any checklist available which will make my work easier |
|
| Back to top |
|
|
| mqjeff |
| Posted: Tue Jan 22, 2013 12:27 pm Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
| nshad007 wrote: |
| Boss, I was just checking if there any checklist available which will make my work easier |
If there was, someone paid someone to write one. You want to get it for free? Maybe you should ask the company you work for if they've already paid someone to write one, then they can give it you.
If you can't write one yourself, you're not qualified to do the job. |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Tue Jan 22, 2013 1:14 pm Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9472
Location: US: west coast, almost. Otherwise, enroute.
|
Audits are normally performed by auditors trained in the technology and methodology of the thing to be audited.
Does your organization have an external auditor? The big ones often have a division that focuses on IT technical stuff. Contact them. Expect to pay for such an audit.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| SAFraser |
| Posted: Tue Jan 22, 2013 3:04 pm Post subject: |
|
|
Shaman
Joined: 22 Oct 2003
Posts: 742
Location: Austin, Texas, USA
|
This is a candid but polite response to the OP.
| bruce2359 wrote: |
Audits are normally performed by auditors trained in the technology and methodology of the thing to be audited.
Does your organization have an external auditor? The big ones often have a division that focuses on IT technical stuff. Contact them. Expect to pay for such an audit. |
This is not a polite response.
| mqjeff wrote: |
| nshad007 wrote: |
| Boss, I was just checking if there any checklist available which will make my work easier |
If there was, someone paid someone to write one. You want to get it for free? Maybe you should ask the company you work for if they've already paid someone to write one, then they can give it you.
If you can't write one yourself, you're not qualified to do the job. |
I prefer polite, or else no response at all. If we feel the question is inappropriate, then our silence will speak for itself. |
|
| Back to top |
|
|
| mqjeff |
| Posted: Wed Jan 23, 2013 5:34 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
A statement of facts is neither polite nor impolite.
A tone of voice is polite or impolite. |
|
| Back to top |
|
|
| lancelotlinc |
| Posted: Wed Jan 23, 2013 5:57 am Post subject: Re: How to conduct review and Audit of IBM Message Broker an |
|
|
Jedi Knight
Joined: 22 Mar 2010
Posts: 4941
Location: Bloomington, IL USA
|
| nshad007 wrote: |
| I am tasked to conduct an audit an EAI with IBM MQ and Broker platform. Can any one provide a Audit program or check list. |
What is the purpose of your audit? Are you auditing HIPAA or PCI compliance? Or, are you auditing how well the tools are implemented?
I echo the other comments: if you don't know how to do this job, how did you get selected?
_________________
http://leanpub.com/IIB_Tips_and_Tricks
Save $20: Coupon Code: MQSERIES_READER |
|
| Back to top |
|
|
| mvic |
| Posted: Wed Jan 23, 2013 6:37 am Post subject: |
|
|
Jedi
Joined: 09 Mar 2004
Posts: 2080
|
| SAFraser wrote: |
| I prefer polite, or else no response at all. If we feel the question is inappropriate, then our silence will speak for itself. |
Completely agree.
nshad007 take a look at these resources, which might help you build a list (assuming there isn't already one somewhere):
All articles about MQ security at http://t-rob.net/
IBM Redbook at http://www.redbooks.ibm.com/abstracts/sg248069.html |
|
| Back to top |
|
|
| nshad007 |
| Posted: Fri Jan 25, 2013 11:43 pm Post subject: |
|
|
Newbie
Joined: 22 Jan 2013
Posts: 6
|
Dear Friends,
Did I asked some thing wrong !!!!!!
Why you guy are trying to judge me. !!!!!
If you dont have the information I requested, Please 'SHUT UP'and go to another post !!!!!!!
Again, if any one have the controls check list of MQ please provide.... |
|
| Back to top |
|
|
| lancelotlinc |
| Posted: Sat Jan 26, 2013 12:01 am Post subject: |
|
|
Jedi Knight
Joined: 22 Mar 2010
Posts: 4941
Location: Bloomington, IL USA
|
| nshad007 wrote: |
Dear Friends,
Did I asked some thing wrong !!!!!!
Why you guy are trying to judge me. !!!!!
If you dont have the information I requested, Please 'SHUT UP'and go to another post !!!!!!!
Again, if any one have the controls check list of MQ please provide.... |
Your post is unclear about the goal of your audit. Are you auditing industry compliance?
_________________
http://leanpub.com/IIB_Tips_and_Tricks
Save $20: Coupon Code: MQSERIES_READER |
|
| Back to top |
|
|
| nshad007 |
| Posted: Sat Jan 26, 2013 12:03 am Post subject: |
|
|
Newbie
Joined: 22 Jan 2013
Posts: 6
|
| I am conducting a general controls review |
|
| Back to top |
|
|
| lancelotlinc |
| Posted: Sat Jan 26, 2013 12:05 am Post subject: |
|
|
Jedi Knight
Joined: 22 Mar 2010
Posts: 4941
Location: Bloomington, IL USA
|
| nshad007 wrote: |
| I am conducting a general controls review |
What is that? What is it you are trying to find out in your 'controls review'?
Are you trying to figure out if someone is using the system correctly?
_________________
http://leanpub.com/IIB_Tips_and_Tricks
Save $20: Coupon Code: MQSERIES_READER |
|
| Back to top |
|
|
| SAFraser |
| Posted: Sat Jan 26, 2013 5:23 am Post subject: |
|
|
Shaman
Joined: 22 Oct 2003
Posts: 742
Location: Austin, Texas, USA
|
Controls, as in security and configuration management? These areas are controls initiatives that our team is working on now. I'm not an auditor, but I am glad to mention a few things that are important to us as MQ admins. If that would help.
No, you didn't ask anything wrong, you just didn't frame your question very well. We are not sure if you are an IT auditor trying to decide what questions to ask, or if you are an MQ admin trying to develop a checklist against which your controls can be judged.
If you are willing to devote some time to thoroughly framing your question, I'll try to help with an answer.
Some of my colleagues can be very abrupt in their postings. Please know that we are not all like that. Thanks. |
|
| Back to top |
|
|
|
|
