Risk Assessor V2.2

What's New in V2.2

We’re excited to tell you about the enhancements included in Risk Assessor Version 2.2. The new and enhanced reports will provide you with a more comprehensive analysis of your IBM i and i5/OS security configuration than ever before.

New Reports

Service Tool User IDs – For systems running IBM i V6R1 a report lists the service tools user ids that have been created on the system along with the privileges they have been granted.

New Features

Reports can now be emailed off the system (Requires that you have configured the system’s integrated email.)
Considerations for PCI (Payment Card Industry) compliance are highlighted throughout the SKYASSESS document. These call-outs are applicable for most laws and regulations with which your organization must comply.
Recommendations for V6R1 system values have been added.
You can now omit the Object Security report. See the ReadMe for configuration details.
When sending the product to i5/OS or IBM i, you can specify the FTP port. While it defaults to the well-known port 21, this accommodates organizations that have changed the port that FTP listens on.

Changes

The SRASetup.exe now FTPs a savf (SETUPTMP.SAVF) to the system. The SETUPTMP/INSTALL command then performs the rest of the installation steps. This facilitates configurations where it is difficult to run the SRASetup.exe to every system. Since the code is now packaged as a SAVF, you can save and restore the savf to other systems, rather than run the SRASetup.exe to upload the code to other systems.
The SKYASSESS wording has been clarified in several areas and brought up-to-date with the current release and security best practices recommendations.
More items are listed in the “Your Security Plan” section of the SKYASSESS document. For example, if you have omitted any reports (such as the object security report), this is noted.
The report listing user objects created into QSYS (SKYQSYSUSR) now lists the current owner in addition to the profile that created the object to better reflect the current risk there objects may pose.