CC log for user that used the application

Question

Hello GRC gurus ,
I would like to know if there is a possibility to check users last log on in Compliance Calibrator . We have people that are doing simulations over Informer tab--> risk analysis --> user level and we would like to have a log .
Thank you very much in advance

Answer 1

Hello David,
Well, sorry but I am still not clear with your question. There are two diffrent things I can guess in the same message. I would request you to please let me know which is the one which exactly you want to do, and would explain you both of the cases as under:
1. Are you wanting to monitor if risk analysis is done on role creation?
OR
2. Are you wanting to monitor if the risk analysis is done on the assignement of the role to a user?
I'm asking this because each of these 2 requirements can be  achieved by RE and AE respectively and the user carrying out these tasks need not even log into CC for doing either/both of 1 & 2.
For 1:
You can use RE and enable the Risk analysis step in the role creation process by enabling and using the web service which connects the Risk analysis from RE to AE. Here (in RE) you can enable the option "not to generate the role if Risk analysis is not done", to ensure everyone does a risk analysis before generating a role.
For 2:
You can use AE directly and do a risk analysis the same way as we did for RE (by using web service), before the role assignment is approved/done to the user.
CASE 3:
In case you do not have RE or AE installed (which is also one of the inferences I get from your post when you mentioned that there is one service desk who takes care of the role assignments), you may configure Risk Terminator in this case, wherein you can configure this tool at the backend to make it mandatory to do the risk analysis when:
a) A role is generated at the backend.
b) A role assignment is done at the backend.
Regards,
Hersh.
Edited by: HERSH GUPTA on Sep 27, 2008 11:54 PM