Patent ID: 8055904

Claim:
An apparatus for security management, the apparatus comprising: a machine including a service account module, the module configured to include access information, the access information including a password for launching process code; and a security account management system configured to associate the service account module with an adjustable timestamp, and to assess a security level for the service account module based on a combination of a security risk level and an operational risk level associated with a service account function and data to be accessed, the security account management system comprising; a service account utility, the utility configured to include service account application code to communicate with the service account module and to register a password change date associated with the access information; and a security record data store, the store configured to retain a security record including an identifier associated with the service account module, the password change date, an identification of a service account module user and a service account module owner, the security risk level, and the operation risk level; and a notification module, the module configured to periodically check the security record for updated information and compliance with a predetermined security policy, wherein the security policy is based on the security risk level and the operational risk level, and notify the service account module owner when the security record needs to be updated to comply with the security policy.