AP-Journal

IBM i (AS/400) Fraud Prevention, Application Security & Business Analysis Solution

AP-Journal is an IBM i proactive fraud management solution providing a unique combination of unparalleled visibility to user activity with real-time alerts and investigation capabilities. AP-Journal not only prevents fraud and secures information in business-critical applications from insider threats and from external security breaches, it also keeps managers closely informed of all changes made to their valuable information assets and streamlines IBM i application journaling procedures.

View AP-Journal Screens

Sample application events monitored by AP-Journal

• Who modified file PAYMENTS between 20:00 and 06:00 during vacation; among those, who reduced the PAYMENT_AMOUNT by more than 15%?
• Who made changes to production file LOANS using a non-approved non-application program (this is in violation of SOX regulations)?
• From which IP address were changes made to the SALARY file during non-standard business hours.
• Which non-HR department users accessed employee records? Of these, which records accessed showed a salary amount in excess of $5K monthly?
• Provide Mr. John Doe, and auditors, a timeline report of all changes made to John's MORTGAGE, which covers the dozens of files in the MORTGAGE system, during the past 25 years.
• Send an SMS text message and e-mail to the company's Chief Security Officer, Manager of IT and Internal Auditor when the PRICE_OF_ITEM changes by more than 4%.
• Send a SYSLOG message and operator message when the PRICE_OF_ITEM for an ITEM shipped last month changes by more than $6.20.
• Send an e-mail whenever an employee record whose SALARY is less than $5000 is read from file SALARIES (accesses, as well as writes and updates, are monitored!).

AP-Journal Features

• Directly addresses and fulfills PCI, SOX, HIPAA, etc. requirements.
• Long-term storage of business sensitive information, independent of journal receiver lifecycle advanced filtering enables saving only important information, to suit storage limits.
• Output as Online, Print, HTML, PDF, Outfile, Email and more.
• READ operations selectively added to Journal, complying with PCI requirements.
• Real-time alerts triggered upon pre-defined changes made to  business-critical data; Email, SMS text messages, operator messages, SYSLOG messages, Twitter and CL Scripts.
• Timeline & cross-application reports based upon user-defined business items.
• Report data can include key fields, description fields and modified fields.
• Identical reports can be produced from AP-Journal's containers or DB journal receivers.
• Filtering according to each database field value.
• Supports remote journaling; i.e. executes on remote end of high availability system.
• Automatic replacement of special-purpose product containers.
• Optional automatic management of journal receivers.
• Real-time or delayed operation mode.
• Low performance impact, easy to use, requires minimal setup and disk space.