IBM i security for the system of record.
F Creative Studio 360 reviews IBM i, including environments still called AS/400, for organisations in any country. Stability is not the same as a reviewed configuration.
The platform is often left out.
IBM i still posts transactions for banks, insurers, manufacturers and public bodies around the world. General-purpose scanners do not read its user profiles, object authorities or audit journal.
If a supervisor expects every critical asset in the security programme, this platform is one of those assets. The review is the same wherever the partition is hosted.
- A platform review, not a network scan
- System values, user profiles, object authorities, network exits and the audit journal are the objects of the review.
- Production stays up
- Changes are recommended. They are applied by your team, in a window you choose, unless hands-on hardening is written into scope.
- Interfaces count
- Modern APIs and web front ends that sit on IBM i are in scope only when the scope says so.
- No product is required
- F Creative Studio 360 does not require a named security product. We review the configuration you already run.
What the review reads
The list is agreed before access is granted. A live production partition is not opened without that agreement.
- System values
- The security-relevant settings that decide how the partition behaves.
- Profiles and authorities
- Powerful profiles, adopted authority, and objects that are open more widely than the job requires.
- Network access
- How the partition is reached, and which exits or restrictions are actually in place.
- Audit journal
- Whether the journal captures the events the institution would need after an incident.
How an engagement runs
Remote or on site. The partition can sit in any country.
- 1
Name the partitions
Production, test, and who is allowed to sign on.
- 2
Read the configuration
With an account and a method your operations team has approved.
- 3
Write the gaps
Each finding names the object and the effect on the business process.
- 4
Leave the change with you
Hardening steps are written so your IBM i administrators can apply them.
What you receive
- A configuration review of the partitions in scope.
- A list of profiles and authorities that need a decision.
- A note on whether the audit journal would support an investigation.
- Recommended changes. We do not claim the platform is certified.
Where this sits
This page is the IBM i review. Broader banking channels are a separate engagement. Mapping to a prudential rule is added only when that supervisor’s standard is in scope.
Common questions
Who runs IBM i?+
Banks, insurers, manufacturers and other organisations in any country. The review is of the platform, not of one national market.
Will you change production settings?+
Only if that work is written into scope and scheduled with your administrators. The default is a review and a written set of changes.
Where do you deliver this?+
For organisations in any country. A local rule is used only when that organisation is actually subject to it. F Creative Studio 360 does not limit the work to one jurisdiction.
How much does it cost, and how long does it take?+
It depends on the systems in scope and whether you want an assessment only or help afterwards. A scoping conversation with F Creative Studio 360 is the way to get a quote. There is no obligation to proceed.
Put the system of record back in the programme.
F Creative Studio 360 will look at the partitions and the access you can grant, then say what the review includes.