-
Sub:     Information Systems Security Update, # 97-03
-
# 97-03


\011System Administration and Ethics--Not an Oxymoron
\011Another Web Site--Don't Be Discouraged
\011SPA Classes


1.  The February 1997 edition of the USENIX ";login:" introduces
the SAGE Code of Ethics.  SAGE is the System Administrators Guild
which has for years concentrated on standards and symposiums for
system and network administrators.  There are six proposed Canons:

a.  The integrity of a system administrator must be beyond reproach.

b.  A system administrator shall not unnecessarily infringe upon the
rights of users.

c.  Communications of system administrators with all whom they may
come in contact shall be kept to the highest standards of professional
behavior.

d.  The continuance of professional education is critical to 
maintaining currency as a system administrator.

e.  A system administrator must maintain an exemplary work ethic.

f.  At all times system administrators must display professionalism
in the performance of their duties.

As a system administrator myself, these are welcome criteria since
the majority of my supported users have often questioned what makes
me tick.  SAGE appears to have established a good founcation upon
which ethical direction and professional conduct can flourish.

2.  Though the number of security-related WEB sites appears to
increase geometrically, the quality of such sites is another matter.
One site worth visiting for sometimes a "different perspective" is
http://www.geocities.com/capecanaveral/3498/security.htm.  

3.  The Software Publishers Association (SPA) has announced its 1997
training schedule.  The Certified Software Manager's (CSM) seminar 
and the Internet in the Workplace seminar will be available throughout
the United States.  One can check out http://www.spa.org for details
or send email to csminfo@spa.org.


[Disclaimer:  Information Systems Security Updates represent the
opinions and views of the author (mcdonalc@wsmr.army.mil), not his
employer.  Recipients are free to quote all/parts of the ISSU with
credit/blame to the author.]