Don’t Wait to Advocate!

Advocacy for your IT team and the work you do is not optional in today’s environment. Management often does not see IT as a valued business partner, but rather as a support system for other departments. Advocacy for your department can be a game changer not just for you and your team, but for the organization as a whole.

When you advocate for the work your IT team does, you improve the visibility of what you bring to the enterprise and gain a seat at the strategic table. You can facilitate collaboration which will support company growth and allow people to do the same amount of work in less time by utilizing stronger, more versatile applications. The benefits are huge.

In spite of the benefits of advocacy, the idea of advocating can be a little intimidating. Many people look at it as something that only happens when something goes wrong. An advocate is someone sent into talk to management when an application blows up or a serious bug is discovered.

However, there is a better way to approach advocacy. Fumbles on the field grab the attention of management and bring focus to IT, but you want to begin advocating for your department long before that. You don’t want the conversation to be started when tensions are high and management is not only upset, but second guessing the applications and technology that they perceive to be the root an issue.

Bugs happen to the best of us. As a true IT professional, you have built applications that are sturdy, reliable, and of industrial strength. They operate as they should, keeping the business moving until that stray bug appears. These issues are the exception not the rule and it’s the periods of time between events that you will find the best opportunities to begin positive and effective dialogue.

So instead of being intimidated by advocacy, here is a simple, positive approach that you can take.

Start by assessing your organization. How are your applications working for the users across your enterprise? Are there any pain points that management or very visible departments are experiencing? If there are, these are your golden ticket, the low hanging fruit waiting for you to pick.

Choose one pain point that is easy to tackle but has high visibility and take the initiative to build a solution. Once that is done, go to management and tell them about the fix. Avoid lofty tech terms and just let them know a solution is now in place. This opens the door to positive dialogue while also shining a spotlight on the IT department in a good way.

Once that critical channel of communication is open, there is a real opportunity for you to shift the perspective of management. You will be able to highlight what you and your team are working on, the value you provide to the company, and the ROI tied to your applications. Show them what is happening when they aren’t looking, the robust software that is driving their business, and pull up a chair to a collaborative conversation. When you have a seat at the table, you will learn all kinds of ways that you can support the company through IT solutions. In turn, management will begin to see software as a way to make their business goals reality. The door is open and the perspective begins to shift towards seeing IT as a valued business partner.

So I encourage you – don’t wait for that bug to wreak havoc to begin advocating for your company. Fortune favors the bold and the go-getter, so find that pain point, create the solution, and step into the role of IT advocate.

Multiple Vulnerabilities Pop Up In Navigator For i – IT Jungle

Multiple Vulnerabilities Pop Up In Navigator For i

January 23, 2023

Timothy Prickett Morgan

Why do we network computers again? Remind me.

A new security bulletin was released for the Navigator for i system management interface for the IBM i platform on January 18, which rolls up four different vulnerabilities for Navigator for i that leave it open to log file access, to obtaining file attributes, and to SQL Injection attacks due to multiple other vulnerabilities.

You can read about this security bulletin at this link. The most severe of the issues is the SQL injection attack, which has a CVSS Base score of 6.3 out of 10. According to the bulletin: “IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information for an object they are authorized to but not while using this interface. By performing a UNION based SQL injection an attacker could see file permissions through this interface.”

Access to log files for Navigator for i 7.3, 7.4, and 7.5 is unintentionally allowed when a remote authenticated user can bypass the interface checks in the tool and download log files by modifying the servlet filter for Navigator for i. This one has a CVSS rating of 4.3. Another vulnerability allows an authenticated user to get files they are authorized to get but not through the Navigator for i toll (this seems like a minor problem if you as me), and yet another one allowed attackers to see user profile attributes why performing an SQL injection.

IBM is providing fixes for these vulnerabilities for IBM i 7.3, IBM i 7.4, and IBM i 7.5. The following PTFs patch Navigator for i up against these vulnerabilities:

The CVE record dates for these vulnerabilities was October 26, 2022, and we remind you that this record date is not necessarily when the vulnerability was first known to customers or IBM. But it certainly was not after that date!

RELATED STORIES

New Nav for i Brings New Stuff to You

What’s New in IBM i Services and Networking

IBM Delivers More Out-of-the-Box Security with IBM i 7.5

Announcement Day: IBM Lifts The Veil On IBM i 7.5 And 7.4 TR6

IBM Accelerates New Nav Development Following Log4j Issue

No Plan To Support New Nav on Older IBM i Releases, IBM Says

Log4j Hits Heritage Version of Navigator for i – No Patch Coming

IBM Ships ACS Version 1.1.9.0

New Nav Puts SQL Services Within Reach

Navigator For IBM i On A Zigzag Journey

IBM Navigator for i Increases Web and Mobile Effort

Tags: Tags: IBM i, IBM i 7.3, IBM i 7.4, IBM i 7.5, Navigator for i, SQL

Automate downloading report from AS400?

My new job uses AS400 for certain reports and I am new to it. Im not too familiar with these old IBM systems. I am using Telnet 5250 with it.

What I want to do is schedule a report to download to a folder every day similar to how you can with SSRS subscriptions (which is what Im familiar with). This report will require dynamic parameters, the date ranges will shift every time. What is the best way to do this?

Side note – Ive been researching AS400 and have noticed that the “main menu” (the one with user tasks, office tasks, system tasks, etc) is not what I see when I login. When I login I see a premade menu specifically about company inquiries, reports, etc. Im wondering if this is because of my permissions? Is there a command I can run that tells me my permissions or what menus I have access to?

Thanks

submitted by /u/Nat9523
[link][comments]

Verified by MonsterInsights