Risk Tracker

Source code checked in, #80132

Project Collection Service Accounts — Mon, 01 Oct 2012 21:49:39 GMT

Upgrade: New Version of LabDefaultTemplate.xaml. To upgrade your build definitions, please visit the following link: http://go.microsoft.com/fwlink/?LinkId=254563

Source code checked in, #80131

Project Collection Service Accounts — Mon, 01 Oct 2012 21:43:10 GMT

Checked in by server upgrade

New Post: Load Users & Roles

securitydev — Thu, 16 Dec 2010 10:45:30 GMT

Solved...I worked with the source code and I was able to understand how it works...if anyone need help, please let me know...the guide is not enough to run the application!!

Commented Issue: AuthZCachManager is not working [7767]

securitydev — Thu, 16 Dec 2010 10:44:01 GMT

Some one to post what initial data to fill in the tables please...
Comments: ** Comment from web user: securitydev **

Solved!!!! if you think you can go with the guide, then you would never instal the application, you should work directly with the source code...if anyone need help in installation, just tell me

Created Issue: AuthZCachManager is not working [7767]

securitydev — Tue, 14 Dec 2010 11:27:42 GMT

Some one to post what initial data to fill in the tables please...

New Post: Load Users & Roles

securitydev — Tue, 14 Dec 2010 11:26:26 GMT

This is a real pain, and I can't figure it out, why there is no one to answer this?!!

We need to know how to "MANUALLY" fill the tables initially so we are able to run AuthZCachManager

Source code checked in, #55373

_TFSSERVICE — Mon, 02 Aug 2010 22:49:34 GMT

Checked in by server upgrade

Updated Release: Risk Tracker Release Notes - Sep 2009 (CTP) (Sep 15, 2009)

vineetbatta — Mon, 21 Sep 2009 05:11:23 GMT

This is release for Risk Tracker V1.0.

Risk Tracker Deployment Guide V1.0.docx - This setup document will explain in detail the steps required to deploy Risk Tracker in your organization.
DataBase.zip - This contains all the script/bat files for installing ISRM database & CISFPortal database.
WebSite.zip - This contains the MSI installer for Risk Tracker Web site.
.RiskTrackerServices.zip - This contains setup files for deploying WCF services that are required for Risk Tracker Application. This also includes Windows Service for notification.

Released: Risk Tracker Release Notes - Sep 2009 (CTP) (Sep 15, 2009)

Mon, 21 Sep 2009 05:11:23 GMT

Commented Issue: SQL Authentication and wrong password in documentation [4271]

VineetBatta — Mon, 21 Sep 2009 04:46:17 GMT

Why do you use SQL authentication for the CISFPortal (and windows for all other services), isn't that an extra security risk?

Also in the documentation there is a mismatch between the "portal" user(page 8) with a password of "123@abc" but at the end (page 54) the password is "abc@123"
Comments: ** Comment from web user: VineetBatta **

1)
The userId and password should be one specified by the person deploying this instance of the application. "portal/abc@123" are just place holders to help user understand the step.

2)
To encrpypt sql connection string please refer section 4.9.3 in the same document. You should never have userid/password as plain text.
msdn documnetation link : http://msdn.microsoft.com/en-us/library/ms998292.aspx

This was required for Widget functionality for now.

To use Windows Authentication for Widgets is very much on our list of things to do and likely to be there by RC build.

New Post: Load Users & Roles

erik_oppedijk — Fri, 18 Sep 2009 11:25:11 GMT

I'm trying to get everything working, the portal site is running, but I'm having problems with the users and roles.

these are the steps:

Create AD with group and user
AuthorizationGroup, filled with domain group name (e.g. CONTOSO\MYGROUP, but alos tried MYGROUP)
RoleMapping, made a map between the above group and one of the roles (0, sysadmin)
Person, unsure what to enter exactly, so entered also email and displayname, etc
Run AuthzCachemanager, it recognizes the groups, but the AuthZUser and AuthzRoleMapping tables stay empty

So what's the trick to get this working?

How is the mapping between Person and AD?

Thanks,

Erik

Created Issue: SQL Authentication and wrong password in documentation [4271]

erik_oppedijk — Thu, 17 Sep 2009 14:21:52 GMT

Updated Wiki: Home

VineetBatta — Wed, 16 Sep 2009 07:09:11 GMT

Risk Tracker v1.0 (CTP) is a sample application built using CISF. This custom application was created to help the Microsoft Information Security Team track information security risk across the company. Eventually the solution will move to use the Microsoft GRC as the core risk engine and integrate into Systems Center. We are providing the source code and sharing the application now so our customers can share from our learning’s and adopt and extend the system for themselves. Risk Tracker serves as an example of how to build a custom security application using the Connected Information Security Framework.

Risk Tracker key features -

• Integrate into Key Business Systems like HR and Portfolio / Asset Management Systems.
• Enter and Track Risks associated with business groups, geographies and projects.
• Enter and Track Tasks Associated with Remediating or Tracking Risks.
• Perform Basic Risk Calculations.
• Track The History of changes made by user/system to Risks.

Note: Soon the Information Security Tools team will release a Business Intelligence solution based on SQL Server 2008 that provides data warehousing, reporting and data analytics for risk data.

To keep up to date with The Information Security Tools Team follow http://blogs.msdn.com/securitytools/

Updated Release: Risk Tracker Release Notes - Sep 2009 (CTP) (Sep 15, 2009)

vineetbatta — Wed, 16 Sep 2009 03:23:39 GMT

Released: Risk Tracker Release Notes - Sep 2009 (CTP) (Sep 15, 2009)

Wed, 16 Sep 2009 03:23:39 GMT

Updated Wiki: Home

mcurphey — Tue, 15 Sep 2009 22:21:02 GMT

Risk Tracker v1.0 (CTP) is a sample application built using CISF. This custom application was created to help the Microsoft Information Security Team track information security risk across the company. Eventually the solution will move to use the Microsoft GRC as the core risk engine and integrate into Systems Center. We are providing the source code and sharing the application now so our customers can share from our learning’s and adopt and extend the system for themselves. Risk Tracker serves as an example of how to build a custom security application using the Connected Information Security Framework.

Risk Tracker key features -

• Integrate into Key Business Systems like HR and Portfolio / Asset Management Systems
• Enter and Track Risks associated with business groups, geographies and projects
• Enter and Track Tasks Associated with Remediating or Tracking Risks
• Perform Basic Risk Calculations
• Track The History of changes made by user/system to Risks.

Note: Soon the Information Security Tools team will release a Business Intelligence solution based on SQL Server 2008 that provides data warehousing, reporting and data analytics for risk data.

To keep up to date with The Information Security Tools Team follow http://blogs.msdn.com/securitytools/

Updated Release: Risk Tracker Release Notes - Sep 2009 (CTP) (Sep 15, 2009)

mcurphey — Tue, 15 Sep 2009 22:17:32 GMT

This is release for Risk Tracker V1.0.

Risk Tracker Deployment Guide V1.0.docx - This setup document which will explain in detail the steps required to deploy Risk Tracker.
DataBase.zip - This contains all the script files for installing ISRM database & CISFPortal database.
WebSite.zip - This contains the MSI installer for Risk Tracker Web site.
.RiskTrackerServices.zip - This contains setup is for deploying WCF services required for Risk Tracker application and Windows Service (for notification).

Released: Risk Tracker Release Notes - Sep 2009 (CTP) (Sep 15, 2009)

Tue, 15 Sep 2009 22:17:32 GMT

Source code checked in, #29769

VineetBatta — Tue, 15 Sep 2009 21:50:23 GMT

This is Risk Tracker code base for version 1.0. (CTP)