I have to disagree with the author on the security and change management. I work at an IBM iseries AS/400 shop. Our IT department does follow the normal protocol on the mainframe systems as well as our Windows and Linux systems, however if you have the elevated credentials on the AS/400, you can do anything such as install software or make configuration changes. In fact the problem with the iseries is that in order to perform certain essential system maintenance procedures, you need to have the equivalent of an Windows Enterprise admin logon rights. Yes, we do have log files for all changes and go through the Sox compliance audits. As well as a ITIL change process, however the actual user rights could be improved by reducing the super admin rights for our operations team.