Archive for August 20th, 2013
Create User: Windows 7

Create Users on Windows 7 in a few easy steps.

Creating separate user accounts is important to the security and privacy of your personal computer.  Once you create another user you should also password protect each account and disable the guest account if you are not using it.

1. Click Start then go to Control Panel.

 

2. Under Control Panel, click User Accounts and Family Safety.

create user Win7

Windows 7 – Create User

(Must be Administrator)

3. In User Accounts, hit Add or Remove user accounts.

Create User Windows 7

Create Windows 7 User

4. Below the list of the User accounts. Hit create new accounts to add a new account.

Make sure you create a password as well.

create User Windows 7

create User Windows 7

Select what type of account you want it to be:  Standard or Administrator.  Remember that a standard user is much safer.  And its perfect if you are making an account that does not require installations and modifications to the operating system.  Standard user account is great for  friends and family.  Be stingy with the administrator account because its susceptible to viruses and misconfigurations.  Only the owner of the system should have an Administrator account.

 

Approved System

Information Assurance is based on obtaining a high level of confidence on information’s confidentiality, integrity, and availability.  Some organizations that deal with “critical information”.  Critical information included things like banking transactions, classified data, information that is evidence in an ongoing investigation.  Companies, unions and government that handle this kind of information usually have a lot of exposure because they are handling public data, share holder data, employee data and are doing a lot of translation across the un-trusted networks such as the Internet.  With critical information and high exposure these organizations MUST have “approved processes” for vetting, testing and validating “approved software” and “approved systems”.

For example, in the Department of Defense there are many lists that have approved software.  These lists are per command within larger organizations.  One over arching process/list is the Common Criteria:

Common Criteria is an international standard for validating technical security built in to security feature of information systems.  The international standard is known as ISO/IEC 15408.

This standard is used by many large organizations all over the world that serve the public:

www.commoncriteriaportal.org

www.commoncriteria.com

Each organization has there own specific security needs so most of the time they have many levels of application approval and process:

NSA / DOD / US Gov - www.niap-ccevs.org - National Information Assurance Partnership (NIAP) uses Common Criteria Evaluation and Validation Scheme (CCEVS) to ensure that only approved Information Assurance (IA)  and IA-Enabled Information Technology (IT) products are used

Canadian Trusted Computer Product Evaluation Criteria
UK – www.cesg.gov.uk/servicecatalogue/ccitsec‎

Commercial organizations that want their products used by organization processing and storing critical information must submit to common criteria as well:

Apple – https://ssl.apple.com/support/security/commoncriteria/‎

Microsoft – www.microsoft.com/en-us/sqlserver/common-criteria.aspx‎

xeroxCommon Criteria

Citrix – www.citrix.com/support/security-compliance/common-criteria.html‎

CiscoCisco Common Criteria 
Emc – EMC – Common Criteria

Organizational units also have their own criteria for approved applications and systems:

US ArmyArmy Chess

US Air ForceAF E/APL – Certified Air Force Evaluated Approved Product List