The System i has long been perceived as one of the most secure platforms available. But experts agree that security is only as effective as the policies, procedures and configurations that are put in place to manage a given system. This study highlights a number of very common security exposures and configuration management practices that must be mitigated in order to protect the data that resides on the System i. In general, the study demonstrated that all organizations could improve the IT controls on their Systemi servers. In particular there are six critical audit areas of concern that warrant immediate inspection and remediation.

• Powerful User Profiles
• User and Password Management
• Data Access
• Network Access Control and Auditing
• System Auditing
• System Security Values