Mitigating risks during new user account creation

I have a requirement for AC 10.
Is it possible to send a message from the security admin stage to role owner stage to know whether to mitigate the risk or not without approving the request at security stage. I am unable to understand the stages to be configured so the mitigation risks can be done during the new/change account request type.
I would like to know who should be responsible for mitigating the risks while creating the request for new or change user account. If we assume that the risk is not mitigated already.  Is security admin or role owner will mitigate it.

Is it possible to send a message from the security admin stage to role owner stage to know whether to mitigate the risk or not without approving the request at security stage.
It is not possible to send a notification. However, the mitigation options can be used to identify the same in the request.
I would like to know who should be responsible for mitigating the risks while creating the request for new or change user account..
This is purely based on the process that you follow in your organization/project. Here are some instances:
1. If the role framework is properly maintained (risks are mitigated at the role level, and only composites are assigned to user) - Niether the business owner nor the security person needs to mitigate the risks at users level, since all the risks are already mitigated at the role level.
2. If the role framework is not properly maintained and single roles are assigned to users - Migitation is required. However, in a few instances, the BPOs or the functional owners will perform a risk analysis, mitigate if necessary and then raise the request. This can be done in RAR manually or also can be done in CUP.
3. The mitigation tasks are completely owned by Security team and BPOs or functional owners will only approve/review.
Hope this answers your question.
Regards,
Raghu

Similar Messages

  • ITunes does not launch with new User Account (Vista)

    One of my limited user accounts on Windows Vista because corrupt, so I created a new limited User Account and copied ALL of the files from the old to new.
    Now, when I try to launch itunes on the new user account, it will not open at all. Itunes works on my administrative account, with no problem.
    Can someone tell me the most pain-free way to resolve this issue. And, whatever solution, will I be at risk of losing my itunes libraries?
    Thank you in advance.

    Hiya. Delayed again. Browsers being cranky. (I blame the aftershocks.)
    It's actually plausible that it was installed in there (by doing a run as administrator on the installer itunes64setup.exe, perhaps). Because that suggests a possible cause for these continual permissions-related problems.
    A lot of what you're seeing is consistent with damaged ACLs (access control lists) on files, folders and registry keys. Although it's a lot rarer than it used to be, one of the ways you could get borked ACLs was if a program (like iTunes or QuickTime) was installed in one user account, and then the user account it had been installed in was deleted (or otherwise rendered unusable).
    We don't know which particular permissions are stuffed up here. But there's a shotgun approach to fixing them which used to work okay, although it's a bit fiddlier to do on a 64-bit system than a 32-bit system.
    I'd strongly recommend setting up a system restore point prior to doing this, so you can revert if things turn to custard.
    The basic technique you follow is from the following blog entry *with one important modification.*
    [Solving setup errors by using the SubInACL tool to repair file and registry permissions|http://blogs.msdn.com/b/astebner/archive/2006/09/04/solving-setup-e rrors-by-using-the-subinacl-tool-to-repair-file-and-registry-permissions.aspx]
    The modification is that when you're editing the file to replace YOURUSERNAME with the name of the account, edit the first line so that %ProgramFiles% instead says %ProgramFiles(x86)% and after the line that reads:
    *subinacl /subdirectories %programfiles%\ /grant=administrators=f /grant=system=f /grant=users=e >> %temp%\subinacl_output.txt*
    ... add another line saying:
    *subinacl /subdirectories %programfiles(x86)%\ /grant=administrators=f /grant=system=f /grant=users=e >> %temp%\subinacl_output.txt*
    (The first is to make sure the commands see the subinacl, because it installs in \Program Files (x86)\ on 64-bit systems, and the second alteration is to make sure that the permissions for the 32-bit program files are fixed too.
    After doing that (it'll take a while to run), can itunes launch normally in the new account?

  • Cant create new user account

    I have migrated my accounts from my old G5 to new Mac Pro and they all work just fine. However when I try to create a new user account for my youngest daughter whilst everything appears to be fine on creation when i try to switch between my admin acount and her account with the correct password (less than 8 characters) all I get is the starscape with no icons, no dock, no mouse! The only way out I can find is to completely reboot the mac from the power button on the front (power down and power up again).
    I have tried deleting and recreating different accounts all with the same result. The original 3 accounts that migrated all work OK.

    Well repairing permissions made no difference. But the problem seemed to lay with parental controls, when i made some changes to that in the new acc it worked but will only work with with basic desktop

  • Dropped frames on playback doesn't replicate in a new user account

    I have been using FCP 4.5 for some time without any problems. Recently I have not been able to play clips in the Timeline without an immediate error message of dropped frames during playback. If I double-click the clip it will play in the Viewer perfectly. This will happen even if the only sequence open contains a single audio track.
    I tried the same thing in a new user account and everything worked as it should, so the problem appears to be a conflict confined to my original account. I've tried moving prefs files for FCP and Quicktime but no joy. All source material is on a separate internal drive to the OS & project files.
    Any ideas?
    Ivan
    PowerMac G4 Sawtooth 400MHz   Mac OS X (10.4.8)   120 & 250GB HDD 640MB RAM

    It seems that I did not remove all the necessary prefs files - I have done so now and all is well, thanks to Ken Stone. He has a thorough description of exactly what to trash here:
    http://www.kenstone.net/fcphomepage/trashing_fcpprefs.html
    cheers,
    Ivan

  • Import Time Machine backup to new user account? Migration Assistant?

    Long story short: my wife has a recent Time Machine backup from HER iMac that we would like to import as a new user account on MY iMac.
    No need to import apps--just user profile, settings, photos/docs, etc.
    Do I need to create a new user account for her on my iMac first? Or will it be done during the import?
    Also, should I be using Time Machine for this, or the Migration Assistant?
    Just looking for the easiest way to do this, as it will be a temporary situation until her new MacBook Pro arrives.
    Thanks!
    EDIT: Not sure if it makes a difference, but her iMac was running Snow Leopard at the time of the last Time Machine backup, and my iMac has Lion.

    Use Migration assistant and import her user account from TM backup.
    Don't create her user account first. Migrating her account will take care of that.
    Shouldn't matter if her previous backup was SL.

  • Gmail created a new user account on my MBP

    This morning I restarted my machine and was shocked there was a new user account in my start-up menu by the name of 'Gmail'. No one has had physical access to my computer. Have I been hacked by google? I've noticed a lot of google updater activity of late. Is this a possibility?

    It sounds like you have seriously been hacked. Even if your Mac's ports are closed now, it's possible, even likely, that major damage has already been done. Your system software could have been modified and your Mac might now be being used to attack others, or to mine personal data from you and send it to a remote computer. The creation of a new user account without your knowledge indicates to me that major damage has already been done and needs to be repaired right away. To fix it:
    1) Immediately disconnect your Mac from the internet and from any other network
    2) Back up your personal documents and files
    3) Reformat your hard drive and restore everything from a old backup you made before the intrusion started
    4) Change all of your passwords and ensure all unneeded ports are closed.
    5) Reconnect the internet and restore your personal files and documents from your latest backup.
    If you have no such older backup, you'll need to follow these steps instead:
    1) Immediately disconnect your Mac from the internet and from any other network
    2) Back up your personal documents
    3) Reformat your hard drive, and reinstall Mac OS X and all of your Apple and third party applications from the original CDs.
    4) Make sure you choose passwords that are different from any you might have used before. Ensure that he firewall is on and all unneeded ports are closed.
    5) Reconnect the internet and run Software Update to make sure all of your system software is up to date.
    6) Update any of your third party applications.
    7) Restore your personal files and documents from your latest backup.

  • Macbook Pro OS Lion couldn't access guest account and new user account

    Hi I bought this new MacBook Pro a month ago.  When I try logging into my guest account, it froze.  I had no other alternative but to get out of it by pressing the power button.  Then I tried open a new user account to see if it also has the same problem.  Unfortunately it did have the same problem - froze after I logged in.  I had done a harddisk check, there seemed to be no problem. So I wonder if this is a common problem of OS Lion? And are there any way for me to solve the problem?

    That is not a common problem with Lion.
    My suggestion is to take it to Apple and ask them to fix. Besides if you take it Apple then they are aware of your problem just in case it returns in the future.
    You might try a safe boot by holding down Shift during boot and seeing if that tells you anything.
    Allan

  • Cannot log in to new user accounts

    I am a long time Apple user and am completely confounded by a problem I am having creating new user accounts on my G4/400 PowerMac running OX 10.4.11. I've been attempting to setup some user accounts for my kids to use. I have no problems setting up the accounts but when I log out of mine and try to log in as them the login window shakes from side to side indicating an incorrect password. This is something that I had a problem a year ago and never solved and today I am trying once again with out success. I feel like I am doing everything correctly since I've been able to do this on my G3 iBook and MacBook.
    Here are a few things I've also done.
    -repaired permissions on the drive ( I have 2 in the machine right now but the other is just my iTunes LIbrary drive)
    -deleted the old user accounts that I setup but couldn't access.
    -tried setting up more new accounts
    -repeated the process several times without ever being able to successfully login to any of the new accounts that I created.
    Any advice to solve this problem would be appreciated.
    Thanks
    Chris

    Hi cc_mac,
    I don't know if you have solved this one yet, but I had exactly the same issue when I recently had a hard drive failure and had to re-install everything. I had copies of all my files, but when I went to set up the user accounts, I could create each account, but I couldn't log in.
    There is a simple solution, you will need to be in an admin account and you will need to use the command line, so open up a terminal window.
    Use the following command for each account you need to fix:
    sudo passwd <username>
    where <username> is the account name that you cannot currently log in to.
    You will need to enter your admin password to allow you to use sudo, so do that. Then you will be asked to type in the new password for the new account. Just to be absolutely sure, you will be asked to re-enter the new password, so do that, and you are done.
    Log out of your admin account, this should bring you back to the log in screen. Now, if everything has gone according to plan, you should have an operational user account.
    I'm not sure what the cause of this issue is but it might be some sort of permissions issue happening in the background. Nevertheless, manually setting the password this way seems to have fixed it for me. I sincerely hope this helps you too.
    Kind Regards,
    Mark D.

  • Setting Up a New User Account - iTunes issue

    My wife and I were both using our Mac as a single user, but logging into iTunes under separate iTunes accounts to download our own music and apps.
    This week I set up a new User Account in her name, and transferred all music and apps to her User Account so she would be able to access and sync on her own account, just by fast switching, rather than logging into iTunes each visit.
    When she plugs her phone into the iMac to sync via iTunes, she gets the following message:
    *iTunes could not sync information to the iPhone " " because another sync client is already running*.
    Anyone had this problem and found a solution ?

    I recently had this same error message problem with my 3GS. Here's everything I did, one of the steps solved the problem...
    1. Restarted with the phone unattached.
    2. Repaired permissions using Disk Utility.
    3. Restarted the phone. Here's where I had some difficulty: After swiping to confirm the shutdown, the screen went black, and I had the spinning icon that wouldn't go away. I ended up having to hold the lock and home buttons down to force shutdown the phone. I powered it back up, and it took forever to start, but it eventually did. I then power-cycled it one more time, and everything was back to normal.
    4. Started up iTunes. Go into the preferences, and under the "Devices" tab, I found my previous backup. I deleted it.
    5. Plugged in the phone, and everything was normal. iTunes made a new backup, so the sync took awhile, but it was successful.
    Good luck!

  • How do I create a new user account?

    I have a new iPod with a different iTunes account than my other devices.  How do I sync the iPod on my iMac with the songs/movies from its own iTunes account?  Do I need to create a new user profle on the computer for that?

    As you said, I recommend to create a new user account and create a new iTunes library on that user with the content of the iPod. If you sync it with your user account, you will get on the iPod the content from a different Apple ID and maybe content that you don't want.
    To create a new user account, open System Preferences > Users &amp; Groups, and press the + button that it's below the left sidebar (where users are listed). Then, just follow the steps to set up the user account.
    Now, every time you start your Mac, OS X will ask you the user account you want to start OS X with

  • How do I create a new user account and migrate my data to it?

    I have problem with Adobe Bridge crashing when I exit Camera Raw.  I was advised by my local apple service store to create a new user account and test Bridge using the new account.  It works fine.  So what do I do now?  I don't know what in my account is causing the conflict but assume that the solution might be e newly setup user. 

    Checking the behaviour in another user account is a TEST, not a solution! You don't need to move everything over. Otherwise, every time you get a user account problem, you'll keep moving to a new user account again and again.
    If the problem does not occur in a new user account, then the cause is something IN your user account. This is usually a Preference file. Adobe Bridge seems to crash a lot, and it can usually be fixed by deleting the Bridge folder in <user>/Library/Application Support/Adobe/
    You can also try deleting the Bridge preference file, which will be in <user>/Library/Preferences, and called com.adobe.bridge5.plist (or similar).
    If that doesn't work, you can test removing a whole bunch of the various Adobe files in those folders. You can always put them back if they don't change anything. And you've got a backup, haven't you? ;-)

  • How do I set up a new user account that can use all my software?

    I set up a new user account on my 3 year old BTO iMac running OS 10.8.5. Unfortunately, when I tried to use it, the computer thought none of my software was registered, activated, licensed, etc. With 26 GB of applications on this machine, it will be a colossal chore to re-do everything. Is there any way around this?
    Thanks for your time,
    Larry

    Is your regular user an Admin?
    Yes. So is the new account I tried to set up.
    Are these apps installed in the main /Applications folder?
    Yes.
    Are they App Store apps or installs from disc/download?
    Both, but App Store purchases are a clear minority, and aren't much of a problem, due to the ease of re-downloading and activating. The downloaded programs are the ones that present the problems. I have not been good about archiving serial numbers and the like, mostly because I've never had a problem like this before.
    What specific apps are you having trouble with? For instance, I know that MS Office and Adobe CS5 for perfectly well for all users on my MBP.
    This is a very long list. Let me give you some of it, and if you really need all of them, I'll add to the list later.
    1Password 4
    ABBYY FineReader for ScanSnap
    Adobe Acrobat 8 Professional
    Adobe Photoshop Elements 8 plus On ONE add-on filters
    Burn
    calibre
    DiskTracker
    Dragon Dictate
    Flv Crunch 1.5.0
    GraphicConverter
    Harmony Assistant
    iBank
    iSkysoft iMedia Converter Deluxe
    MacX Video Converter Pro
    QMidi
    Screenium
    Unison
    WireTap Studio
    Also, what troubleshooting steps have you taken so far?
    Not much, since I have no idea where the problem is. I looked for some central repository of software serial numbers or activations, but didn't find one.

  • How to move iTunes library to new user account?

    My primary user account on my Mac (I'm the only user but I have an admin account just incase my 1 account ever gets corrupt or something) was operating very slowly and messed up an external hard drive among other problems so I made a new user account which seems to be operating more smoothly.  I've tried to trouble shoot the problems with the old user account but it took a lot less time to just make a new user account.  Anyway, I tried copying over my entire iTunes from older user account to new user account.  When I open iTunes in the new user account, I changed the iTunes folder location in preferences and then restarted iTunes.  None of my playlists or media were showing up in iTunes.  I tried importing the XML file by doing FILE > ADD TO LIBRARY.  I also tried draging the .it file to iTunes.  No luck.  Any ideas?!  I was able to copy my library back to the old account and have everything there but the new account doesn't import all my media/metdata/playlists.  I don't want to re-import my whole library again because I will lose some of the meta-data like play count, ratings, etc.  I've looked at a lot of guides online with no luck.
    Any suggestions are greatly appreciated!

    If you put the entire iTunes folder in the exact same location as it was in your other account it should have opened up intact. There should be no need to change the media file location preferences since this has nothing to do with iTunes looking for your library file which is what it uses to locate everything else.  iTunes will automatically look for the library file in the default location in whatever account is used to invoke iTunes.
    An issue that might arise would be permissions not being set correctly on the files, but then I would have expected iTunes to complain clearly about that.

  • How to move an old iTunes folder into a new user account?

    Hi there, so I have a 98Gb iTunes library and it was sitting on an older version of an iMac (2006 OSX 10.6.8  iTunes 11.4).  Realised it would be cumbersome to transfer to my newer iMac (2014 - OSX 10.9.5 iTunes 12.1.2.27) so I used the migration assistant to transfer everything across.  Only problem  is now I have 2 user accounts for myself on the new iMac and all I want to do is consolidate my iTunes library into one, but am struggling to move the iTunes folder directly into the newer user account on the new iMac.  I keep getting a "you do not have permission to move this".  I've tried both passwords to each account but still it won't move the folder.  Any suggestions or directions would be greatly appreciated.

    SlippySlope wrote:
    Were you saying that you have two user accounts (one one the old Mac and one on the new Mac) or two Apple IDs with your music?
    Read the original post. The user used Migration Assistant to copy files from an old computer to a new one. This creates a new computer account with the old content. The user then had two accounts on the new computer with content the user wished to merge.

  • Sharpener Pro 3 has problems in Aperture as the Pre sharpener continually asks one to buy or activate and the Output Sharpener causes Aperture to hang. Have removed all duplicate fonts and tried using a new user account. Any ideas?

    I am experiencing problems with Sharpener Pro 3 as an Aperture 3 plug-in. These are:  the Pre sharpener continually asks one to buy or activate and the Output Sharpener causes Aperture to hang. Following discussions with Nik Software I have removed all duplicate fonts and tried using a new user account. Neither of the courses of action worked. Have other users experienced these difficulties? Can you suggest an alternative remedy?

    I am experiencing problems with Sharpener Pro 3 as an Aperture 3 plug-in. These are:  the Pre sharpener continually asks one to buy or activate and the Output Sharpener causes Aperture to hang. Following discussions with Nik Software I have removed all duplicate fonts and tried using a new user account. Neither of the courses of action worked. Have other users experienced these difficulties? Can you suggest an alternative remedy?

Maybe you are looking for