Delivering security consulting that results of a vision document describing

• Rules and guidelines of the RABOBANK security requirements
• A new optimized standard implementation of RACF that is in line with future requirements
• Definition of needed methods and tooling to automate RACF administration

• Development of security- and storage management applications for use in future security conversions/implementations like Role Based Access Control. This application is programmed in Assembler, ReXX, CARLa, ISPF/PDF Dialog Tag Language using z/OS RACF interface and z/Secure constructs
• Design and implementation of RACF security concepts / definitions

• Conversion of CA Easytrieve programs to COBOL equivalents

• Development of security- and storage management applications for use in future security conversions/implementations like Role Based Access Control. This application is programmed in Assembler, ReXX, CARLa, ISPF/PDF Dialog Tag Language using z/OS RACF interface and z/Secure constructs
• Design and implementation of RACF security concepts / definitions

in a non-mainframe MicroFocus PL/1, COBOL environment

• Converting old Assembler programs to PL/1, COBOL to be used in the (non-mainframe) MicroFocus PL/1, COBOL environment
• Design, programming and implementation of solutions for IBM PL/1, COBOL functions that are unsupported in the MicroFocus environment

• Development of security- and storage management applications for use in future security conversions/implementations like Role Based Access Control. This application is programmed in Assembler, ReXX, CARLa, ISPF/PDF Dialog Tag Language
• Design and implementation of RACF security concepts / definitions

• Delivery of information system security solutions based upon the analysis of user, operational, policy, regulatory and resource demands during delivery of new mainframe user access management
• Support the development, implementation and operation of security technologies, processes and procedures into the z/OS systems and networks 
• Provide dedicated Operational delivery in support of Logical Access Management project to deliver security controls in RACF and supported security databases 
• Provide second-line z/OS Security (RACF and tools) support to Technical Support staff and end users 
• Conversion of existing non-RBAC security definitions to RBAC based definitions 
• Design and development of an interface between IdentityIQ (Linux) and z/OS (Enterprise Mainframe) for automatic security provisioning
• Design and development of applications for automatic provisioning in ReXX and Assembler

• Goal of this project was to split off parts of the RBS bank into a new ?Williams & Glyn? bank. 
• In this project I was a Technical Security Consultant and I was responsible for the design and technical implementation of the entire security environment (i.e. both the z/OS system environment and the applications security environment). 
• Unfortunately, due to political reasons (BRexit), the RBS Bank had to cancel this project. 

• Installation of SuSE Linux for zSystems in a virtual Windows IBM z emulator environment

• In this project I defined and documented the Security Principles for the entire mainframe security (RACF) environment. I redesigned and restructured the entire Mainframe RACF Security Environment, based on 
  • functional tasks / responsibilities / ownership 
  • Role Based Access Control
  • segregation of duty 
  • phase out of system wide special attributes (SPECIAL, OPERATIONS) 
  • elimination of high access rights 
• Implementation of my suggested organizational alterations.
• I designed auditing and reporting procedures for control, usage and protection of control elements, sensitive programs etc. These procedures were built using ReXX and zSecure CARLa. 
• I developed system modules to detect and report insecure situations. If desired, the system can automatically take actions due to detected insecure situations.
• I designed and programmed an ISPF/PDF application for automated generation of RACF definitions for new and changed applications, application development environments and workbenches. This system was built using ReXX and Dialog Tag Language. 
• Transfer of knowledge in various areas: Security, RACF, Programming (ReXX, Assembler) etc. 

• This period I spent in the United States of America (California).

• Development of various security- and storage management procedures and programs in JCL, IBM Assembler, ReXX and ISPF/PDF Dialog Tag Language
• The developed tooling is intended to be used as a base in future security conversions/implementations

• As a continuation of the ING RBAC implementation project (august ?08 - july ?09), I adapted my tooling to meet changed requirements: 
  • tooling is also to be used in the daily operational work environment 
  • implementation of ?Segregation Of Duty 
• Furthermore I taught the employees in using the tooling in the daily operational security activities and acted as a coach for day to day security activities. In the second part of this project I acted as a consultant: I advised how to implement Automatic Provisioning under ITIM (IBM Tivoli Identity Manager). Obviously my tooling was to be implemented in the Automatic Provisioning procedures.

• This period I spent in the United States of America (California).

• These converted DB/2 unloads were to be loaded directly into ORACLE data bases. It was necessary to implement UTF8 data conversion in these programs
• These programs have been written in IBM Assembler

• Installation, implementation and customization of z/OS systems that are to be used for test- and educational purposes
• These Implementations include implementation of subsystems, network-, security- (RACF) and storage management- (DFSMS, DFHSM) definitions/policies
• Design and development of various system-exits, system-procedures and systemprograms in JCL, REXX and IBM Assembler in order to have the system automatically respond to various incidents 

• This period I spent in the United States of America (California).

• Consultancy in the area of work- and conversion-methods for implementation of an RBAC (Role Based Access Control) based security implementation at the ING Banking Group. As a result I designed developed and implemented working-methods together with the needed programs and exits to automatically convert to the desired security implementation. This implementation included over 45.000 users on 20 z/OS systems. Some systems were based on TSS TopSecret or ACF2 for security management. Using my methods and tooling implied a huge increase in quantity as well as (even more important) quality resulting in a huge money-saver
• The programs have been written in REXX, Dialog Tag Language and Microsoft (Excel) Visual Basic. The design and implementation of the security definitions were based on RACF (zSecure, CARLa).