IMS Audit Management Expert for z/OS

Sarbanes-Oxley and other regulations have placed a heavy technical burden on IT staff to fulfill auditors’ requests for views of data. Auditors must track, analyze and report on the status of legal and regulatory compliance efforts. Until now, there has been no easy way for auditors to access the data they need, other than relying on the IT department.

IBM has changed the game with IMS Audit Management Expert, giving auditors, and security administrators the capabilities they need to deliver accurate, timely data and reports for use in auditing activities.

IMS Audit Management Expert for z/OS:

- Collects and correlates many different types of information into its audit repository:

• Collection and reporting of READ (GETS), INSERT, UPDATE and DELETE accesses to databases

• Ability to audit and report on READ, INSERT, UPDATE, and DELETE calls on specific database segments

• READ and DELETE calls retain the concatenated key of the audited segment

• UPDATE and INSERT calls retain the segment concatenated key as well as the segment data, as found in the DLI call I/O area

• Access to database data sets and image copy data sets as recorded in SMF

• User access to the IMS system via SIGNON as recorded in the IMS log

• PSB and database change of state activity as recorded in the IMS log

• System STOP and START activity as recorded in the IMS log

- Provides auditors with flexible options for examining the data in the audit repository.

- Does not require auditors to log into IMS and does not permit them to directly manipulate any IMS resource.
- Supports an easy to use interface for auditors, DBAs, and security administrators allowing them to work together to deliver accurate data for use in audit activity.

- Allows an authorized auditor to investigate an exposure by reviewing what data has been changed in the system.

- Offers a user-friendly administration interface that enables IMS Audit Management Expert administrators to easily define IMS Audit Management Expert entities such as users, groups and collection criteria.