This case study/product review offers the the point of view of Promedico, a large Israeli pharmaceuticals company, on iSecurity AP-Journal - the applications it is used for and how it makes business more efficient.

Click here to view.

Check out this noteworthy real-life security story: a major European high-tech company (we’ll call it Company X) couldn’t trace a certain large sum after it had been transferred between several different systems throughout the company. Unfortunately for Company X, the authorities claimed it was income…

When Company X tried to prove otherwise, they found that the trail of the sum was too complex to trace. They put numerous managers to the task of trying to trace this sum, but no go. It was impossible for the company to prove that the sum was not income.

To make a long story short, Company X had to pay 5 Million Euros! Arggghhh…

What could have given this story a fairytale ending?  A security solution that tracks all changes in application databases, throughout all the company’s systems. A solution that provides clear reports, displaying all changes which occurred over long periods, on a single timeline. This could have been just the proof that Company X needed to rescue it from its tight spot.

Such as solution was actually developed by Raz-Lee Security, and is called AP-Journal. An Application Security and Business Analysis Solution for System i, AP-Journal protects business-critical information, keeping managers closely informed of all changes in their databases using real-time alerts and cross-application reports.
Click to learn more about AP-Journal.

Written by Shari Masafy, MarCom Manager at Raz-Lee Security
Email Shari Masafy at marketing@razlee.com

As someone who has been intimately involved with worldwide security solutions worldwide, I can divide the Power i security solutions into two categories. 

Producing an Application Security Report

I’ll call the more prevalent type/category “Infrastructure Security” – into which most security products fall. The products in this category, such as Firewalls, secure network access to the Power i from PCs and laptops, and help perform QAUDJRN auditing, user and password management and more.

Application Security, however, refers to securing business critical data, or tracking, in real time, the changes to this data which cross a user-defined threshold. Strange that products of this type are not as widespread, since the organization’s most valued asset is its business-critical information, – but we are seeing a growing interest in this type of product.

One example of an Application Security tool is Raz-Lee’s iSecurity AP-Journal solution. Using AP-Journal, a manager can easily specify that a programmer can get a raise of no more than $200, whereas a secretary can receive a raise of no more than 4% of their current salary. A violation of this rule triggers real-time alerts, operator messages and even automatic shut-down of the offender’s session.

Manager Gets a Threshold-Generated Alert

Another unique and important feature is an automatically-generated report, which covers all changes made to a certain item, in all the organization’s applications. An example here is easy… Try to imagine a report that covers all the changes in your mortgage over 25 years – changes to payment terms and rates, to guarantors, and to the house itself…  Any mortgage bank and its auditors would love to see this type of report!

Written by Shmuel Zailer, CEO, Raz-Lee Security
Email Shmuel Zailer at marketing@razlee.com

I’d like to share an amusing story. One of our customers, a large agricultural company, recently found an unexplained debit of $100,000. They couldn’t figure out why the debit was so large and spent hours and hours on trying to track the problem. Finally, they arrived at a simple answer: one of their clerks forgot to properly exit a field after filling in data… thus adding a few extra zeros to the sum – which resulted in $100,000 instead of only $1!

The CEO of this company happened to see a demo of the iSecurity AP-Journal application security solution – which issues alerts on any change in the databases, and provides reports displaying all database changes over long periods – and immediately decided to purchase it, knowing it would eliminate similar problems in the future.

Now, with AP-Journal, the manager gets an alert on any entry of quantity above 99,000 in the said field. Any exception is immediately reported and swiftly corrected. No more hours spent on useless searching, and no more erroneous financial data.

Written by Shari Masafy, Marketing Communications Manager at Raz-Lee Security
Email Shari Masafy at marketing@razlee.com