The State of System i (AS/400) Security 2008
Tuesday, May 13, 2008
The PowerTech Group, Inc. has released its fifth annual review of the state of security on IBM’s System i platform (also known as AS/400 or iSeries). The study is compiled from over 200 system audits that were conducted by PowerTech over the last 12 months. The results demonstrate that the overall security of machines in the field is often both poorly managed, and poorly configured by the organizations that use it.
98% of Fortune 1000 companies run some part of their business on this architecture, and some of the most sensitive information a company keeps is stored on the system. The study points out that a large percentage of systems are not configured correctly by IT departments with respect to security, resulting in a large number of systems being vulnerable to internal security breaches. The computing and networking demands of today’s enterprises require more open connectivity and targeted sharing of data between departments and key business partners. But many AS/400 shops have yet to embrace the new security technologies that are available in IBM’s architecture, leaving their critical data exposed.
This presentation will reveal the findings of the study in 6 major areas and highlight some of the most common exposures. John Earl will provide recommendations for remediation of some of the common System i (AS/400) audit points.
|