Choosing a Database Audit Strategy and Process

Henry Parnell, Lumigent Technologies

Abstract:

Henry will discuss the alternative technological solutions that can potentially be used to collect reliable audit trail data on the operations of a DBMS system with a discussion of the strengths and weaknesses of each approach. The alternative selected can greatly affect the depth of information that can be collected as well as the possibility of meeting regulatory compliance requirements without adversely impacting the DBMS system. This presentation will help to demystify the data auditing landscape, will compare each possible data collection approach as well as numerate the capabilities needed by an enterprise class database auditing solution.

Biography:

Henry Parnell is a Solutions Architect with Lumigent Technologies the maker of the leading database auditing software solution Audit DB; in this role he has worked with many of Lumigents largest customers advising on and helping to plan large scale deployments of Audit DB. Henry has more then 20 years of experience with successful DBMS industry startup organizations, acting in Product Management, Development and Service Delivery roles.

Version 9 and Some Very Useful Technologies

Jay Yothers, IBM

Abstract:

Jay will describe the Version 9 features and highlight some of the ones that promise to be particularly useful, like table cloning.

Biography:

Jay Yothers is a DB2 for z/OS architect and an IBM Master Inventor. He has participated in the development of a number of major DB2 functions, from the very first release of DB2 through Distributed Data Base, Data Sharing, and Relational Objects to 64-bit virtual exploitation. He currently has architectural responsibilities across the DB2 for z/OS product. He also represents DB2 for z/OS on a number of design and architecture boards, within the DB2 organization, among the DB2 family of products, and across IBM.

RACF and DB2

Mark Nelson, IBM

Abstract:

Mark Nelson will describe the DB2/RACF interface.

Biography:

Mark Nelson is a twenty-year member of the RACF Design team and a frequent speaker on RACF and z/OS security related topics. Mark’s areas of expertise in RACF include logging and reporting, RACF database analysis, and DB2. Mark’s publications include NaSPA Technical Support magazine, IBM Hot Topics, and zJournal. Mark is a co-author of the upcoming book "Mainframe Basics for Security Experts: Getting Started with RACF".

The Impact of Regulatory Compliance on Database Administration

Joe Brockert, Neon Enterprise Software Inc.

Abstract:

Governmental regulations are increasing in number, and many of them impact the way organizations must treat their data. Sarbanes-Oxley, HIPAA, BASEL II, and more make the news, but what do they mean to a DBA? This presentation will offer an overview of the regulations and their impact on database administration. Topics to be discussed include:

• What are the Regulations?

• Compliance Issues

• IT Controls

• Long-term Data Retention

• Database Auditing

• Additional DBA Concerns

Biography:

Joe has 30 years of experience in the full life cycle of Information Technology, and in his 20 years of industry experience he has worked in the design, development, and implementation of custom written applications for oil and gas, law, insurance, utility and food distribution companies. Seven of these years were spent as Manager of Database Administration for SYSCO, a Fortune 100 company. In the last 10 years Joe has been a System Consultant working for several ISV’s in the area of integration software and Database tools, across all industries, working extensively in Asia-Pac. Joe has served on the board for the DB2 Exchange in Houston and has been a guest speaker at various trade shows and user groups.