SOX and HP Unix Security

[wip]

A hot subject and hope all of you are one way or the other affected by SOX.What software or scripts/utilities you use to scan/remediate and collect evidences for SOX /RCSA and TRAM.

Highly appreciate any replay
Wip

[Arunvijai_4]

Hi Wip,

Here are some threads worth reading,

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=959648
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=999091

-Arun

[Steven E. Protter]

Shalom wip,

SOX, Sarbanes-Oxley is really a moving target. How A Corporate governance law applies to computer security was not envisioned by the laws authors.

That being said, your systems must be secure and have audit records for two reasons:
1) A major security breach could cause corporate problems, hammer your stock price and hurt shareholders.
2) Record keeping requirements of SOX having to do with Corporate governance.

From the Security Standpoint, you will get many answers.

If feel the following are a must.
1) Regular installation of quarterly HP-UX security updates. The name varies with the OS version.
2) Hardening your system with Bastille.
3) Regular patch assessments (itrc.hp.com)
4) Regular run and installation of results from security_patch_check which ships separately as a patch and is part of Bastille.

Long term, I think compliance requires the following:
1) Abandoning use of all clear text authentication protocols, such as ftpd,telnet,rsh etc.
2) Migrate from NIS top LDAP or ADS integration(see 3)
3) Go to trusted system, which does not work with NIS.

SEP

[dirk dierickx]

'A hot subject and hope all of you are one way or the other affected by SOX.'

how nice of you to wish something like that to all of us :(

system security should be a standard subject in an admins tasks, unfortunatly SOX is more then just security and brings a lot of burocracy to the table which is something i can do without.