Re: OT: Looking for copy of auditors security check software

D&T did our audit recently. They had us run sekchek on some of our servers. We ran it, gave them the output, they encripted it and sent it to South Africa to be analyzed. Then they sent us a summary report along with their recommendations. Go to www.sekchek.com and you can see sample reports for most OS's. I may have the unix utility somewhere on a floppy. Brian Grellinger I.S. Manager DHIAC Information Systems >>> Nebojsa Sevo <remove_nebojsa.sevo@zg.htnet.hr> 11/25/04 08:01AM >>> Deloitte Touche staff visited one of my customers 6 months ago. I think that they use SekCheck, too. They checked password attributes (password expiration, password length, rules for picking a password, when password can be reused, etc). I am not sure but I think that can't decrypt the passwords. Nebojsa On 24 Nov 2004 06:41:37 -0800, triton45@hotmail.com (Andy) wrote: >We are scheduled to have our IT systems audited next month by Deloitte >Touche Tohmatsu. I would really like to get a copy of their security >check software so I can at least be aware of some of the >problems/issues they will find. > >I google'd this to death - anyone have a copy or know where I can find >one? The software is called "SekCheck Security Reporting for AS400 / >NT / XP / Novell / UNIX platforms". I need the hp-ux version, but any >would do. > >Thanks, >Andy sending to informix-list