For a good set of recommendations you might try starting with the Security Wizard available through Operations Navigator (now called iSeries Navigator). Expand on the system name, then right click on Security, choose Configure and you will be brought into the Security Wizard. If you don't use OpsNav, you can get the same set of recommendations through a security planner found at here. The benefit of going through this interface is that you can obtain recommendations for AIX, OS/390 and Windows as well as OS/400. You can also obtain network recommendations for each platform.
In addition to these recommendations, I recommend that you resist the temptation to allow developers to have *ALLOBJ special authority even though development will now take place on a separate system. In addition, if you have not already done so, make sure you implement a good change management system.
================================== MORE INFORMATION ON THIS TOPIC ==================================
The Best Web Links: tips, tutorials and more.
Search400's targeted search engine: Get relevant information on security.
Ask your systems management questions--or help out your peers by answering them--in our live discussion forums.
This was first published in June 2003