Monitoring and managing credential and application threat mitigations in a computer system
A method of monitoring tasks for reducing security risks in a computer system comprising a plurality of computers executing a plurality of applications is provided. The method based on a set of login information, displays a set of risks for a set of applications that execute on the plurality of computers and an identification of a person in a hierarchy supervised by the logged-in person assigned to mitigate each risk. The method also displays the current status of each assigned mitigation.
1. A method of monitoring tasks for reducing security risks in a computer system comprising a plurality of computers executing a plurality of applications, the method comprising:
based on a set of login information, displaying (i) a set of risks for a set of applications executing on the plurality of computers and (ii) for each risk, an identification of a person assigned to mitigate the risk, wherein the assigned person is in a hierarchy of persons comprising a first person associated with the set of login information and at least one second person supervised by the first person; and
displaying a current status of each risk that a person in the hierarchy is assigned to mitigate,
wherein the set of risks comprises (i) a first set of credential threat risks for a first set of applications, the credential threat risks mitigated by revising credentials of one or more users accessing the applications, and (ii) a second set of application threat risks for a second set of applications, at least a subset of the application threat risks identified by a lack of one or more security measures to prevent unauthorized exploits of the applications.
2. The method of claim 1 further comprising displaying, based on a selection by the logged-in person of a user interface control, a subset of the set of risks and a current status of each risk in the subset of risks.
3. The method of claim 2 , wherein the subset of risks are risks in the set of risks that the logged-in person is personally assigned to mitigate.
4. The method of claim 1 , wherein the current status of a particular risk comprises one of (i) resolved, (ii) in progress, and (iii) not started.
5. The method of claim 1 , further comprising receiving a reassignment of a mitigation for a particular risk to a different person in the hierarchy based on the current status of the particular risk.
6. The method of claim 1 , further comprising receiving a reassignment of a mitigation for a particular risk to a different person in the hierarchy based on the current status of one or more other risks.
7. The method of claim 1 , wherein displaying the set of risks comprises displaying, for each risk, a first detection and a last detection of the risk.
8. The method of claim 1 , wherein displaying the set of risks comprises identifying, for each risk, a location where an application associated with the risk is executed.
9. The method of claim 1 , wherein displaying the set of risks comprises identifying, for each risk, an identification of an organizational unit utilizing an application associated with the risk.
10. The method of claim 1 , wherein at least a second subset of the application threat risks are identified based on a current configuration of the application.
11. The method of claim 1 , wherein at least a second subset of the application threat risks are identified based on a current configuration of a computer executing the application.
12. The method of claim 1 , wherein a particular application is in both the first set of applications and the second set of applications.
13. A non-transitory machine readable medium storing a program for monitoring tasks for reducing security risks in a computer system comprising a plurality of computers executing a plurality of applications, the program executable by at least one processing unit, the program comprising sets of instructions for:
displaying, based on a set of login information, (i) a set of risks for a set of applications executing on the plurality of computers and (ii) for each risk, an identification of a person assigned to mitigate the risk, wherein the assigned person is in a hierarchy of persons comprising a first person associated with the set of login information and at least one second person supervised by the first person; and
displaying a current status of each risk that a person in the hierarchy is assigned to mitigate,
wherein the set of risks comprises (i) a first set of credential threat risks for a first set of applications, the credential-threat risks mitigated by revising credentials of one or more users accessing the applications, and (ii) a second set of application threat risks for a second set of applications, at least a subset of the application threat risks identified by a lack of one or more security measures to prevent unauthorized exploits of the applications.
14. The non-transitory machine readable medium of claim 13 , wherein the program further comprises a set of instructions for displaying, based on a selection by the logged-in person of a user interface control, a subset of the set of risks and a current status of each risk in the subset of risks.
15. The non-transitory machine readable medium of claim 14 , wherein the subset of risks are risks in the set of risks that the logged-in person is personally assigned to mitigate.
16. The non-transitory machine readable medium of claim 13 , wherein the current status of a particular risk comprises one of (i) resolved, (ii) in progress, and (iii) not started.
17. The non-transitory machine readable medium of claim 13 , wherein the program further comprises a set of instructions for receiving a reassignment of a mitigation for a particular risk to a different person in the hierarchy based on the current status of the particular risk.
18. The non-transitory machine readable medium of claim 13 , wherein the program further comprises a set of instructions for receiving a reassignment of a mitigation for a particular risk to a different person in the hierarchy based on the current status of one or more other risks.
19. The non-transitory machine readable medium of claim 13 , wherein the set of instructions for displaying the risks comprises a set of instructions for displaying, for each risk, a first detection and a last detection of the risk.
20. The non-transitory machine readable medium of claim 13 , wherein the set of instructions for displaying the risks comprises a set of instructions for displaying, for each risk, at least one of (i) a location where an application associated with the risk is executed and (ii) an identification of an organizational unit utilizing an application associated with the risk.