I know I'm repeating myself with the topic of multiple layers of defense, but I'm hoping that if I talk about this often enough more of you will begin to implement these layers - at least one layer at a time. The $45 million bank heist that recently made the headlines gives me the perfect excuse.  The general consensus over the cause of this heist is not that it's a technology issue - it was a lack of controls and monitoring that led to this breach.

If your boss came to you and asked what your organization has in place to prevent this type of incident, what would you say?    That you're running an AS/400 and IBM says it's secure so we don't have anything to worry about?  If that's your answer I'll repeat myself again ... IBM i is one of the most secure-able systems available today.  Yes, IBM has given us tremendous features that allow us to secure our systems... but ... you have to implement those features !!!