---
title: Conformità aziendale in SAP
description: Come è possibile automatizzare i controlli mitigativi in SAP? Vediamo una soluzione disponibile sul mercato chiamata Security Weaver
image: https://www.aglea.com/hubfs/Aglea/Imported_Blog_Media/Controlli%20SAP%20-%20personalizzazione-Jun-14-2024-09-18-23-9115-AM.png
---

[linkedin](https://www.linkedin.com/company/292350?trk=vsrp_companies_res_name&trkInfo=VSRPsearchId%3A3373431891426179412478%2CVSRPtargetId%3A292350%2CVSRPcmpt%3Aprimary) [YouTube](https://www.youtube.com/c/AgleaSAPSecurity?sub_confirmation=1) [Twitter](https://twitter.com/AgleaItaly?lang=it)

[![Logo-Aglea-horsa-company](https://www.aglea.com/hubfs/Aglea/Aglea_November2018%20Theme/Images/Logo-Aglea-horsa-company.webp) ](https://www.aglea.com/)

# Conformità aziendale in SAP

# Conformità aziendale in SAP

Posted by [Massimo Manara](https://www.aglea.com/blog/author/massimo-manara) on Nov 24, 2021 12:00:00 AM

- [Tweet](https://twitter.com/share)

Possono esserci parecchie motivazioni legate a questo termine e nel contesto SAP.

 

![magnifier](https://www.aglea.com/hs-fs/hubfs/Aglea/Imported_Blog_Media/magnifier-Jun-14-2024-09-18-22-3095-AM.jpg?width=534&name=magnifier-Jun-14-2024-09-18-22-3095-AM.jpg)

 

In questo caso facciamo riferimento alla gestione della separazione dei compiti (SoD) ed ai controlli mitigativi legati agli accessi.

## Quali le normative di riferimento?

Ogni società può avere delle normative o framework di riferimento in base al settore in cui opera. Alcune di queste si applicano indipendentemente dal settore, ad esempio, per il fatto di essere quotati in borsa. Ed anche in questo ultimo caso dipende da quale.

 

Guarda qui il video sull'argomento e l'approfondimento di questo post: [Quotazione in borsa? Ecco cosa fare in SAP!](https://www.aglea.com/blog/stai-per-quotarti-in-borsa-ecco-11-tips-per-la-sicurezza-dei-tuoi-dati)

 

 

Oppure normative specifiche di settore come le [GxP leggi qui il post dedicato](https://www.aglea.com/blog/gxp-sap) 

 

## Il processo di gestione della Segregation Of Duties

In generale sono parecchie le normative, nazionali o internazionali e gli standard di riferimento che richiedono di adottare delle politiche di separazione dei compiti aziendali.

 

A questo link trovi il nostro approfondimento sulla [gestione della SoD](https://www.aglea.com/segregation-of-duties-in-sap) e dei rischi aziendali che comporta se non applicata nel contesto specifico di SAP (ma che può essere applicato a qualsiasi altro scenario analogo).

 

## I controlli mitigativi

Come avrai letto nel collegamento sopra indicato, una delle fasi, per la gestione della Segregation Of Duties è quella di gestire i controlli mitigativi. Guarda anche qui il video sulla parte di Remediation e Mitigation.

 

 

Ovvero nei casi dove non è possibile rimuovere i rischi è necessario sviluppare dei meccanismi di controllo.

 

I controlli mitigativi legati alla gestione degli accessi, sono parte del sistema di Internal Control System (ICS), più in generale.

 

Ovvero l'insieme di tutti i controlli aziendali che vengono svolti (non necessariamente legati solamente alla gestione degli accessi). Leggi questo contenuto su come impostare un modello di [controlli interni aziendali](https://www.aglea.com/blog/cosa-sono-i-controlli-interni).

 

## I controlli mitigativi in SAP

Uno degli aspetti sottovalutati è proprio questa fase, in maniera specifica per SAP. Non sempre esistono infatti dei report specifici, già pronti, da poter utilizzare così come sono.

 

SAP offre molte reportistiche sono tracciate molte attività svolte a sistema, per poter svolgere dei controlli preventive o detective ([ma SAP traccia tutto?](https://www.aglea.com/blog/sap-traccia-tutto))

 

Ma spesso serve sviluppare dei controlli propri. Andando ad implementare dei programmi di controlli specifici.

 

Questa parte può diventare (questo dipende molto anche dal tipo di controlli che si vuole sviluppare e dal grado di automatizzazione) molto onerosa in termini di analisi e sviluppi.

 

Per questo motivo esistono strumenti, sul mercato, che possono essere utilizzare per questo scopo. Per avere dei controlli già pronti o per semplificare la creazione/fruizione.

 

Vediamo l'esempio del prodotto [Security Weaver](https://www.securityweaver.com/) e della sua specifica funzionalità chiamata Automated Mitigations.

 

Guarda qui anche la presentazione del software!

 

 

Si tratta di un prodotto molto simile al [SAP GRC Access Control](https://www.aglea.com/sap-grc), di fatto copre le medesime funzionalità, i moduli principali sono i seguenti, oltre all'automated Mitigations, non incluso nella suite SAP GRC Access Control.

 

- **Authorization Architect**, per velocizzare ed ottimizzare la manutenzione dei ruoli SAP o il ridisegno dei ruoli
- Emergency Repair, per gestione di utenze di emergenza (super user) 
    - [Per gestire una super user in SAP server GRC?](https://www.aglea.com/blog/per-gestire-una-super-user-in-sap-serve-sap-grc)
    - [SAP Emergency Access](https://www.aglea.com/blog/sap-emergency-access)
- **Role Recertification**, per definire un processo di ri-validazione dei ruoli
- **Secure Provisioning**, per definire un processo di attribuzione dei ruoli tramite un workflow
- **Separations Enforcer**, per la gestione e l'analisi dei rischi SoD

 

Come è possibile vedere nell'immagine seguente una delle funzionalità dell'automated Mitigation è quella di poter definire dei criteri di personalizzazioni e selezione durante la lettura dei dati. 

 

Esempio:

 

Ho un rischio che prevedere la gestione degli ordini di acquisto (Purchase Order) contro la gestione dei fornitori (Vendor). In questo caso posso, una volta selezionata o personalizzata la reportistica di controllo, immagine seguente, andare a verificare a sistema quanto e quante occorrenze si sono realmente verificate.

 

![Controlli SAP - personalizzazione](https://www.aglea.com/hs-fs/hubfs/Aglea/Imported_Blog_Media/Controlli%20SAP%20-%20personalizzazione-Jun-14-2024-09-18-23-9115-AM.png?width=2006&name=Controlli%20SAP%20-%20personalizzazione-Jun-14-2024-09-18-23-9115-AM.png)

 

Generando quindi delle allerte che, incrociando i dati rilevanti possano far emergere un rischio effettivo, considerando anche delle soglie di materialità. 

 

Nell'immagine seguente è infatti possibile vedere queste alert con il dettaglio di alcuni degli elementi di business esposti.

 

![Controlli SAP](https://www.aglea.com/hs-fs/hubfs/Aglea/Imported_Blog_Media/Controlli%20SAP-Jun-14-2024-09-18-23-1610-AM.png?width=2061&name=Controlli%20SAP-Jun-14-2024-09-18-23-1610-AM.png)

 

Ti interessa approfondire l'argomento? [Contattaci qui](https://www.aglea.com/contatti/).

 

 

 

 Topics: [governance](https://www.aglea.com/blog/tag/governance), [security weaver](https://www.aglea.com/blog/tag/security-weaver)

### Iscriviti qui!

### Blog Aglea, cosa puoi trovare?

Ogni mercoledì pubblichiamo articoli, interviste e documenti relativi alla security SAP.

Cosa puoi trovare:

- Suggerimenti su come mettere in sicurezza i sistemi SAP
- Come fare a … (How To)
- Checklist
- Gli errori comuni che spesso vengono fatti in ambito Security SAP
- Interviste con esperti del settore
- Chi è AGLEA quale è la nostra vision security SAP

### Post recenti

### Post By Topic

- [SAP Security (32)](https://www.aglea.com/blog/tag/sap-security)
- [SAP GRC (24)](https://www.aglea.com/blog/tag/sap-grc)
- [audit sap (22)](https://www.aglea.com/blog/tag/audit-sap)
- [fiori launchpad (20)](https://www.aglea.com/blog/tag/fiori-launchpad)
- [pfcg (19)](https://www.aglea.com/blog/tag/pfcg)
- [authorization concept (18)](https://www.aglea.com/blog/tag/authorization-concept)
- [cyber security (18)](https://www.aglea.com/blog/tag/cyber-security)
- [SAP audit (17)](https://www.aglea.com/blog/tag/sap-audit)
- [audit (16)](https://www.aglea.com/blog/tag/audit)
- [gdpr (16)](https://www.aglea.com/blog/tag/gdpr)
- [sap cyber security (16)](https://www.aglea.com/blog/tag/sap-cyber-security)
- [auditing (15)](https://www.aglea.com/blog/tag/auditing)
- [sap security blog (14)](https://www.aglea.com/blog/tag/sap-security-blog)
- [supporto sap ams (14)](https://www.aglea.com/blog/tag/supporto-sap-ams)
- [PFCG SAP transaction (13)](https://www.aglea.com/blog/tag/pfcg-sap-transaction)
- [SAP Cloud (13)](https://www.aglea.com/blog/tag/sap-cloud)
- [sap FIORI (13)](https://www.aglea.com/blog/tag/sap-fiori)
- [libro SAP (12)](https://www.aglea.com/blog/tag/libro-sap)
- [sod (12)](https://www.aglea.com/blog/tag/sod)
- [SAP GDPR (11)](https://www.aglea.com/blog/tag/sap-gdpr)
- [sap password (11)](https://www.aglea.com/blog/tag/sap-password)
- [sap vulnerability (11)](https://www.aglea.com/blog/tag/sap-vulnerability)
- [SAP cloud identity services (10)](https://www.aglea.com/blog/tag/sap-cloud-identity-services)
- [Segregation of duties (10)](https://www.aglea.com/blog/tag/segregation-of-duties)
- [vulnerability assessment (10)](https://www.aglea.com/blog/tag/vulnerability-assessment)
- [sap btp (9)](https://www.aglea.com/blog/tag/sap-btp)
- [sap license auditing (9)](https://www.aglea.com/blog/tag/sap-license-auditing)
- [SAP Cloud Security (8)](https://www.aglea.com/blog/tag/sap-cloud-security)
- [SAP FIORI Security (8)](https://www.aglea.com/blog/tag/sap-fiori-security)
- [SAP HR (8)](https://www.aglea.com/blog/tag/sap-hr)
- [consulenza sap security (8)](https://www.aglea.com/blog/tag/consulenza-sap-security)
- [idm (8)](https://www.aglea.com/blog/tag/idm)
- [secure coding sap (8)](https://www.aglea.com/blog/tag/secure-coding-sap)
- [security audit log (8)](https://www.aglea.com/blog/tag/security-audit-log)
- [siem (8)](https://www.aglea.com/blog/tag/siem)
- [threat detection (8)](https://www.aglea.com/blog/tag/threat-detection)
- [upgrade (8)](https://www.aglea.com/blog/tag/upgrade)
- [FIORI Security (7)](https://www.aglea.com/blog/tag/fiori-security)
- [S/4HANA (7)](https://www.aglea.com/blog/tag/s-4hana)
- [SAP IAG (7)](https://www.aglea.com/blog/tag/sap-iag)
- [SAP LOG (7)](https://www.aglea.com/blog/tag/sap-log)
- [User Access Management (7)](https://www.aglea.com/blog/tag/user-access-management)
- [governance (7)](https://www.aglea.com/blog/tag/governance)
- [internal audit (7)](https://www.aglea.com/blog/tag/internal-audit)
- [sap consulenza security (7)](https://www.aglea.com/blog/tag/sap-consulenza-security)
- [sap fiori space (7)](https://www.aglea.com/blog/tag/sap-fiori-space)
- [sap grc 12 (7)](https://www.aglea.com/blog/tag/sap-grc-12)
- [security ams (7)](https://www.aglea.com/blog/tag/security-ams)
- [su53 (7)](https://www.aglea.com/blog/tag/su53)
- [HANA Security (6)](https://www.aglea.com/blog/tag/hana-security)
- [SAP ECC (6)](https://www.aglea.com/blog/tag/sap-ecc)
- [autorizzazioni sap (6)](https://www.aglea.com/blog/tag/autorizzazioni-sap)
- [identity management system (6)](https://www.aglea.com/blog/tag/identity-management-system)
- [sap patch (6)](https://www.aglea.com/blog/tag/sap-patch)
- [ISO (5)](https://www.aglea.com/blog/tag/iso)
- [SAP Identity and Access Governance (5)](https://www.aglea.com/blog/tag/sap-identity-and-access-governance)
- [SU01 sap (5)](https://www.aglea.com/blog/tag/su01-sap)
- [access management (5)](https://www.aglea.com/blog/tag/access-management)
- [authorization model (5)](https://www.aglea.com/blog/tag/authorization-model)
- [controlli interni (5)](https://www.aglea.com/blog/tag/controlli-interni)
- [cyber security culture (5)](https://www.aglea.com/blog/tag/cyber-security-culture)
- [data loss prevention (5)](https://www.aglea.com/blog/tag/data-loss-prevention)
- [documentazione sap security (5)](https://www.aglea.com/blog/tag/documentazione-sap-security)
- [log sap (5)](https://www.aglea.com/blog/tag/log-sap)
- [oggetti autorizzativi critici (5)](https://www.aglea.com/blog/tag/oggetti-autorizzativi-critici)
- [rfc security (5)](https://www.aglea.com/blog/tag/rfc-security)
- [ruoli (5)](https://www.aglea.com/blog/tag/ruoli)
- [sap authorization review (5)](https://www.aglea.com/blog/tag/sap-authorization-review)
- [sap fue (5)](https://www.aglea.com/blog/tag/sap-fue)
- [sap_all (5)](https://www.aglea.com/blog/tag/sap_all)
- [securitybridge (5)](https://www.aglea.com/blog/tag/securitybridge)
- [sicurezza sap (5)](https://www.aglea.com/blog/tag/sicurezza-sap)
- [sviluppo codice sicuro (5)](https://www.aglea.com/blog/tag/sviluppo-codice-sicuro)
- [userid (5)](https://www.aglea.com/blog/tag/userid)
- [IAG (4)](https://www.aglea.com/blog/tag/iag)
- [RISE with SAP (4)](https://www.aglea.com/blog/tag/rise-with-sap)
- [SAP IDM (4)](https://www.aglea.com/blog/tag/sap-idm)
- [aglea (4)](https://www.aglea.com/blog/tag/aglea)
- [code vulnerability analysis (4)](https://www.aglea.com/blog/tag/code-vulnerability-analysis)
- [data privacy (4)](https://www.aglea.com/blog/tag/data-privacy)
- [fraud management (4)](https://www.aglea.com/blog/tag/fraud-management)
- [itgc (4)](https://www.aglea.com/blog/tag/itgc)
- [microsoft (4)](https://www.aglea.com/blog/tag/microsoft)
- [patch (4)](https://www.aglea.com/blog/tag/patch)
- [sap data masking (4)](https://www.aglea.com/blog/tag/sap-data-masking)
- [sap gui (4)](https://www.aglea.com/blog/tag/sap-gui)
- [sap gui security (4)](https://www.aglea.com/blog/tag/sap-gui-security)
- [sap hana (4)](https://www.aglea.com/blog/tag/sap-hana)
- [sap logon (4)](https://www.aglea.com/blog/tag/sap-logon)
- [sap super user (4)](https://www.aglea.com/blog/tag/sap-super-user)
- [security awareness (4)](https://www.aglea.com/blog/tag/security-awareness)
- [test system (4)](https://www.aglea.com/blog/tag/test-system)
- [workflow security SAP (4)](https://www.aglea.com/blog/tag/workflow-security-sap)
- [AI (3)](https://www.aglea.com/blog/tag/ai)
- [HANA (3)](https://www.aglea.com/blog/tag/hana)
- [RISE (3)](https://www.aglea.com/blog/tag/rise)
- [Risk Management (3)](https://www.aglea.com/blog/tag/risk-management)
- [SAP AUDIT LOG (3)](https://www.aglea.com/blog/tag/sap-audit-log)
- [SAP NOW (3)](https://www.aglea.com/blog/tag/sap-now)
- [Single Sing On (3)](https://www.aglea.com/blog/tag/single-sing-on)
- [UCON (3)](https://www.aglea.com/blog/tag/ucon)
- [UI logging (3)](https://www.aglea.com/blog/tag/ui-logging)
- [amministratore di sistema (3)](https://www.aglea.com/blog/tag/amministratore-di-sistema)
- [cloud platform (3)](https://www.aglea.com/blog/tag/cloud-platform)
- [consulenti (3)](https://www.aglea.com/blog/tag/consulenti)
- [consulenti sap security (3)](https://www.aglea.com/blog/tag/consulenti-sap-security)
- [corsi sap (3)](https://www.aglea.com/blog/tag/corsi-sap)
- [crittografia SAP (3)](https://www.aglea.com/blog/tag/crittografia-sap)
- [e-learning (3)](https://www.aglea.com/blog/tag/e-learning)
- [emergency users (3)](https://www.aglea.com/blog/tag/emergency-users)
- [formazione sap (3)](https://www.aglea.com/blog/tag/formazione-sap)
- [mail security sap (3)](https://www.aglea.com/blog/tag/mail-security-sap)
- [manuali sap security (3)](https://www.aglea.com/blog/tag/manuali-sap-security)
- [password policy (3)](https://www.aglea.com/blog/tag/password-policy)
- [process control (3)](https://www.aglea.com/blog/tag/process-control)
- [process mining (3)](https://www.aglea.com/blog/tag/process-mining)
- [processi security (3)](https://www.aglea.com/blog/tag/processi-security)
- [profili sap (3)](https://www.aglea.com/blog/tag/profili-sap)
- [reporting (3)](https://www.aglea.com/blog/tag/reporting)
- [rfc (3)](https://www.aglea.com/blog/tag/rfc)
- [rpa sap security (3)](https://www.aglea.com/blog/tag/rpa-sap-security)
- [sap compliance (3)](https://www.aglea.com/blog/tag/sap-compliance)
- [sap custom (3)](https://www.aglea.com/blog/tag/sap-custom)
- [sap data obfuscation (3)](https://www.aglea.com/blog/tag/sap-data-obfuscation)
- [sap dati personali (3)](https://www.aglea.com/blog/tag/sap-dati-personali)
- [sap ias (3)](https://www.aglea.com/blog/tag/sap-ias)
- [sap mail (3)](https://www.aglea.com/blog/tag/sap-mail)
- [sap siem (3)](https://www.aglea.com/blog/tag/sap-siem)
- [sap sso (3)](https://www.aglea.com/blog/tag/sap-sso)
- [sap training (3)](https://www.aglea.com/blog/tag/sap-training)
- [se16 (3)](https://www.aglea.com/blog/tag/se16)
- [sicurezza dei dati sap (3)](https://www.aglea.com/blog/tag/sicurezza-dei-dati-sap)
- [su25 (3)](https://www.aglea.com/blog/tag/su25)
- [suim (3)](https://www.aglea.com/blog/tag/suim)
- [ticket management system (3)](https://www.aglea.com/blog/tag/ticket-management-system)
- [training (3)](https://www.aglea.com/blog/tag/training)
- [transazioni sap (3)](https://www.aglea.com/blog/tag/transazioni-sap)
- [zero trust security (3)](https://www.aglea.com/blog/tag/zero-trust-security)
- [27001 (2)](https://www.aglea.com/blog/tag/27001)
- [NIS2 (2)](https://www.aglea.com/blog/tag/nis2)
- [SAP GRC Process Control (2)](https://www.aglea.com/blog/tag/sap-grc-process-control)
- [SAP Gateway security (2)](https://www.aglea.com/blog/tag/sap-gateway-security)
- [Trace autorizzazioni SAP (2)](https://www.aglea.com/blog/tag/trace-autorizzazioni-sap)
- [UI Masking (2)](https://www.aglea.com/blog/tag/ui-masking)
- [agleasapsecurity (2)](https://www.aglea.com/blog/tag/agleasapsecurity)
- [ams (2)](https://www.aglea.com/blog/tag/ams)
- [corso (2)](https://www.aglea.com/blog/tag/corso)
- [custom (2)](https://www.aglea.com/blog/tag/custom)
- [cyber security exposure (2)](https://www.aglea.com/blog/tag/cyber-security-exposure)
- [epi-use (2)](https://www.aglea.com/blog/tag/epi-use)
- [eventi (2)](https://www.aglea.com/blog/tag/eventi)
- [gxp (2)](https://www.aglea.com/blog/tag/gxp)
- [intelligenza artificiale (2)](https://www.aglea.com/blog/tag/intelligenza-artificiale)
- [joule (2)](https://www.aglea.com/blog/tag/joule)
- [organizzazione (2)](https://www.aglea.com/blog/tag/organizzazione)
- [profili (2)](https://www.aglea.com/blog/tag/profili)
- [progetti sap security (2)](https://www.aglea.com/blog/tag/progetti-sap-security)
- [programmazione sicura (2)](https://www.aglea.com/blog/tag/programmazione-sicura)
- [quality (2)](https://www.aglea.com/blog/tag/quality)
- [quotazione borsa (2)](https://www.aglea.com/blog/tag/quotazione-borsa)
- [s_tabu_dis (2)](https://www.aglea.com/blog/tag/s_tabu_dis)
- [sap business role (2)](https://www.aglea.com/blog/tag/sap-business-role)
- [sap catalog (2)](https://www.aglea.com/blog/tag/sap-catalog)
- [sap data protection (2)](https://www.aglea.com/blog/tag/sap-data-protection)
- [sap developer (2)](https://www.aglea.com/blog/tag/sap-developer)
- [sap enterprise threat detection (2)](https://www.aglea.com/blog/tag/sap-enterprise-threat-detection)
- [sap etd (2)](https://www.aglea.com/blog/tag/sap-etd)
- [sap gxp compliance (2)](https://www.aglea.com/blog/tag/sap-gxp-compliance)
- [sap ilm (2)](https://www.aglea.com/blog/tag/sap-ilm)
- [sap italia (2)](https://www.aglea.com/blog/tag/sap-italia)
- [sap menu (2)](https://www.aglea.com/blog/tag/sap-menu)
- [sap query (2)](https://www.aglea.com/blog/tag/sap-query)
- [sap router security (2)](https://www.aglea.com/blog/tag/sap-router-security)
- [sap security guidelines (2)](https://www.aglea.com/blog/tag/sap-security-guidelines)
- [sap security note (2)](https://www.aglea.com/blog/tag/sap-security-note)
- [sap security partner (2)](https://www.aglea.com/blog/tag/sap-security-partner)
- [sap security patch day (2)](https://www.aglea.com/blog/tag/sap-security-patch-day)
- [sap security tools (2)](https://www.aglea.com/blog/tag/sap-security-tools)
- [sap security video (2)](https://www.aglea.com/blog/tag/sap-security-video)
- [sap sos (2)](https://www.aglea.com/blog/tag/sap-sos)
- [sap workflow (2)](https://www.aglea.com/blog/tag/sap-workflow)
- [se16n (2)](https://www.aglea.com/blog/tag/se16n)
- [secure operation map (2)](https://www.aglea.com/blog/tag/secure-operation-map)
- [slaw (2)](https://www.aglea.com/blog/tag/slaw)
- [smartworking (2)](https://www.aglea.com/blog/tag/smartworking)
- [soar (2)](https://www.aglea.com/blog/tag/soar)
- [social engineering (2)](https://www.aglea.com/blog/tag/social-engineering)
- [solution manager (2)](https://www.aglea.com/blog/tag/solution-manager)
- [success Factors (2)](https://www.aglea.com/blog/tag/success-factors)
- [super utenti sap (2)](https://www.aglea.com/blog/tag/super-utenti-sap)
- [system users (2)](https://www.aglea.com/blog/tag/system-users)
- [tabelle (2)](https://www.aglea.com/blog/tag/tabelle)
- [trasformazione digitale (2)](https://www.aglea.com/blog/tag/trasformazione-digitale)
- [usmm (2)](https://www.aglea.com/blog/tag/usmm)
- [youtube aglea (2)](https://www.aglea.com/blog/tag/youtube-aglea)
- [youtube sap (2)](https://www.aglea.com/blog/tag/youtube-sap)
- [10bklaze (1)](https://www.aglea.com/blog/tag/10bklaze)
- [20000 (1)](https://www.aglea.com/blog/tag/20000)
- [312 (1)](https://www.aglea.com/blog/tag/312)
- [9001 (1)](https://www.aglea.com/blog/tag/9001)
- [ABAP (1)](https://www.aglea.com/blog/tag/abap)
- [Barcellona (1)](https://www.aglea.com/blog/tag/barcellona)
- [CIAM (1)](https://www.aglea.com/blog/tag/ciam)
- [CSR (1)](https://www.aglea.com/blog/tag/csr)
- [CVA (1)](https://www.aglea.com/blog/tag/cva)
- [CVE-2021-44228 (1)](https://www.aglea.com/blog/tag/cve-2021-44228)
- [Cloud ALM (1)](https://www.aglea.com/blog/tag/cloud-alm)
- [DPO (1)](https://www.aglea.com/blog/tag/dpo)
- [ERM (1)](https://www.aglea.com/blog/tag/erm)
- [Enterprise risk management (1)](https://www.aglea.com/blog/tag/enterprise-risk-management)
- [GROW (1)](https://www.aglea.com/blog/tag/grow)
- [Gestione del rischio aziendale (1)](https://www.aglea.com/blog/tag/gestione-del-rischio-aziendale)
- [HANA Roles (1)](https://www.aglea.com/blog/tag/hana-roles)
- [HR Data Reporting (1)](https://www.aglea.com/blog/tag/hr-data-reporting)
- [IAS (1)](https://www.aglea.com/blog/tag/ias)
- [IPS (1)](https://www.aglea.com/blog/tag/ips)
- [Liste distribuzione SAP (1)](https://www.aglea.com/blog/tag/liste-distribuzione-sap)
- [Log4Shell SAP (1)](https://www.aglea.com/blog/tag/log4shell-sap)
- [Milano (1)](https://www.aglea.com/blog/tag/milano)
- [OKR (1)](https://www.aglea.com/blog/tag/okr)
- [Onboarding (1)](https://www.aglea.com/blog/tag/onboarding)
- [P-user (1)](https://www.aglea.com/blog/tag/p-user)
- [Portale SAP note (1)](https://www.aglea.com/blog/tag/portale-sap-note)
- [Privilege Access Management (1)](https://www.aglea.com/blog/tag/privilege-access-management)
- [S-user (1)](https://www.aglea.com/blog/tag/s-user)
- [SAP ABAC (1)](https://www.aglea.com/blog/tag/sap-abac)
- [SAP Assurance and Compliance Software (1)](https://www.aglea.com/blog/tag/sap-assurance-and-compliance-software)
- [SAP C4C (1)](https://www.aglea.com/blog/tag/sap-c4c)
- [SAP DAM (1)](https://www.aglea.com/blog/tag/sap-dam)
- [SAP DLP (1)](https://www.aglea.com/blog/tag/sap-dlp)
- [SAP DRM (1)](https://www.aglea.com/blog/tag/sap-drm)
- [SAP ERP cloud private (1)](https://www.aglea.com/blog/tag/sap-erp-cloud-private)
- [SAP FKOM (1)](https://www.aglea.com/blog/tag/sap-fkom)
- [SAP Fraud Management (1)](https://www.aglea.com/blog/tag/sap-fraud-management)
- [SAP RBAC (1)](https://www.aglea.com/blog/tag/sap-rbac)
- [SAP RECON (1)](https://www.aglea.com/blog/tag/sap-recon)
- [SAP Sales (1)](https://www.aglea.com/blog/tag/sap-sales)
- [SAP Table (1)](https://www.aglea.com/blog/tag/sap-table)
- [SECURITY PATTERN ANALYSIS (1)](https://www.aglea.com/blog/tag/security-pattern-analysis)
- [SLA (1)](https://www.aglea.com/blog/tag/sla)
- [SOX (1)](https://www.aglea.com/blog/tag/sox)
- [SPOOL (1)](https://www.aglea.com/blog/tag/spool)
- [ST01 (1)](https://www.aglea.com/blog/tag/st01)
- [STAUTHTRACE (1)](https://www.aglea.com/blog/tag/stauthtrace)
- [Statistiche security SAP (1)](https://www.aglea.com/blog/tag/statistiche-security-sap)
- [admin (1)](https://www.aglea.com/blog/tag/admin)
- [aglea tribe (1)](https://www.aglea.com/blog/tag/aglea-tribe)
- [analisi dei rischi (1)](https://www.aglea.com/blog/tag/analisi-dei-rischi)
- [azure (1)](https://www.aglea.com/blog/tag/azure)
- [backup (1)](https://www.aglea.com/blog/tag/backup)
- [biolock sap (1)](https://www.aglea.com/blog/tag/biolock-sap)
- [biometria (1)](https://www.aglea.com/blog/tag/biometria)
- [blacklist sap (1)](https://www.aglea.com/blog/tag/blacklist-sap)
- [bot (1)](https://www.aglea.com/blog/tag/bot)
- [brand (1)](https://www.aglea.com/blog/tag/brand)
- [certificazioni sap (1)](https://www.aglea.com/blog/tag/certificazioni-sap)
- [chatGPT (1)](https://www.aglea.com/blog/tag/chatgpt)
- [ciso (1)](https://www.aglea.com/blog/tag/ciso)
- [cloud connector (1)](https://www.aglea.com/blog/tag/cloud-connector)
- [codice sicuro SAP (1)](https://www.aglea.com/blog/tag/codice-sicuro-sap)
- [compatibility packs (1)](https://www.aglea.com/blog/tag/compatibility-packs)
- [continuità del servizio (1)](https://www.aglea.com/blog/tag/continuità-del-servizio)
- [customization sap (1)](https://www.aglea.com/blog/tag/customization-sap)
- [cyber security deception (1)](https://www.aglea.com/blog/tag/cyber-security-deception)
- [data access subject request (1)](https://www.aglea.com/blog/tag/data-access-subject-request)
- [data subject request gdpr (1)](https://www.aglea.com/blog/tag/data-subject-request-gdpr)
- [delete user (1)](https://www.aglea.com/blog/tag/delete-user)
- [developer (1)](https://www.aglea.com/blog/tag/developer)
- [documentazione SAP GRC (1)](https://www.aglea.com/blog/tag/documentazione-sap-grc)
- [documentazione di progetto (1)](https://www.aglea.com/blog/tag/documentazione-di-progetto)
- [dsr (1)](https://www.aglea.com/blog/tag/dsr)
- [dynamic authorization management (1)](https://www.aglea.com/blog/tag/dynamic-authorization-management)
- [esg (1)](https://www.aglea.com/blog/tag/esg)
- [esterni (1)](https://www.aglea.com/blog/tag/esterni)
- [exchange rates (1)](https://www.aglea.com/blog/tag/exchange-rates)
- [external users management (1)](https://www.aglea.com/blog/tag/external-users-management)
- [falsi positivi (1)](https://www.aglea.com/blog/tag/falsi-positivi)
- [feedback (1)](https://www.aglea.com/blog/tag/feedback)
- [firefighter (1)](https://www.aglea.com/blog/tag/firefighter)
- [firefighter HANA (1)](https://www.aglea.com/blog/tag/firefighter-hana)
- [flash (1)](https://www.aglea.com/blog/tag/flash)
- [fornitori sap (1)](https://www.aglea.com/blog/tag/fornitori-sap)
- [ftp (1)](https://www.aglea.com/blog/tag/ftp)
- [go-live (1)](https://www.aglea.com/blog/tag/go-live)
- [grc ram (1)](https://www.aglea.com/blog/tag/grc-ram)
- [handover autorizzazioni (1)](https://www.aglea.com/blog/tag/handover-autorizzazioni)
- [hardening (1)](https://www.aglea.com/blog/tag/hardening)
- [horsa (1)](https://www.aglea.com/blog/tag/horsa)
- [integrazioni sap (1)](https://www.aglea.com/blog/tag/integrazioni-sap)
- [intune (1)](https://www.aglea.com/blog/tag/intune)
- [lavoro agile (1)](https://www.aglea.com/blog/tag/lavoro-agile)
- [libri (1)](https://www.aglea.com/blog/tag/libri)
- [malware (1)](https://www.aglea.com/blog/tag/malware)
- [mandanti (1)](https://www.aglea.com/blog/tag/mandanti)
- [metodologia sap activate (1)](https://www.aglea.com/blog/tag/metodologia-sap-activate)
- [microsoft planner (1)](https://www.aglea.com/blog/tag/microsoft-planner)
- [microsoft stream (1)](https://www.aglea.com/blog/tag/microsoft-stream)
- [multicompany sap security (1)](https://www.aglea.com/blog/tag/multicompany-sap-security)
- [multiple logon (1)](https://www.aglea.com/blog/tag/multiple-logon)
- [naming convention (1)](https://www.aglea.com/blog/tag/naming-convention)
- [nist (1)](https://www.aglea.com/blog/tag/nist)
- [nuovi assunti (1)](https://www.aglea.com/blog/tag/nuovi-assunti)
- [ob08 (1)](https://www.aglea.com/blog/tag/ob08)
- [pa20 (1)](https://www.aglea.com/blog/tag/pa20)
- [parameter sap (1)](https://www.aglea.com/blog/tag/parameter-sap)
- [partner sap (1)](https://www.aglea.com/blog/tag/partner-sap)
- [pfud (1)](https://www.aglea.com/blog/tag/pfud)
- [podcast sap security (1)](https://www.aglea.com/blog/tag/podcast-sap-security)
- [postmand sap api (1)](https://www.aglea.com/blog/tag/postmand-sap-api)
- [progetti security sap (1)](https://www.aglea.com/blog/tag/progetti-security-sap)
- [quantum (1)](https://www.aglea.com/blog/tag/quantum)
- [remediation (1)](https://www.aglea.com/blog/tag/remediation)
- [remote access (1)](https://www.aglea.com/blog/tag/remote-access)
- [rfc destination (1)](https://www.aglea.com/blog/tag/rfc-destination)
- [risorse umane (1)](https://www.aglea.com/blog/tag/risorse-umane)
- [role transport (1)](https://www.aglea.com/blog/tag/role-transport)
- [s_tabu_nam (1)](https://www.aglea.com/blog/tag/s_tabu_nam)
- [s_tabu_rfc (1)](https://www.aglea.com/blog/tag/s_tabu_rfc)
- [sailpoint (1)](https://www.aglea.com/blog/tag/sailpoint)
- [sap TechEd (1)](https://www.aglea.com/blog/tag/sap-teched)
- [sap access control (1)](https://www.aglea.com/blog/tag/sap-access-control)
- [sap acronimi (1)](https://www.aglea.com/blog/tag/sap-acronimi)
- [sap activate (1)](https://www.aglea.com/blog/tag/sap-activate)
- [sap add on (1)](https://www.aglea.com/blog/tag/sap-add-on)
- [sap antivirus (1)](https://www.aglea.com/blog/tag/sap-antivirus)
- [sap asap (1)](https://www.aglea.com/blog/tag/sap-asap)
- [sap assure (1)](https://www.aglea.com/blog/tag/sap-assure)
- [sap backup (1)](https://www.aglea.com/blog/tag/sap-backup)
- [sap bis (1)](https://www.aglea.com/blog/tag/sap-bis)
- [sap business continuity (1)](https://www.aglea.com/blog/tag/sap-business-continuity)
- [sap business integrity screening (1)](https://www.aglea.com/blog/tag/sap-business-integrity-screening)
- [sap business partner (1)](https://www.aglea.com/blog/tag/sap-business-partner)
- [sap bw (1)](https://www.aglea.com/blog/tag/sap-bw)
- [sap covid (1)](https://www.aglea.com/blog/tag/sap-covid)
- [sap cua (1)](https://www.aglea.com/blog/tag/sap-cua)
- [sap cva (1)](https://www.aglea.com/blog/tag/sap-cva)
- [sap earlywatch (1)](https://www.aglea.com/blog/tag/sap-earlywatch)
- [sap frodi (1)](https://www.aglea.com/blog/tag/sap-frodi)
- [sap gamification (1)](https://www.aglea.com/blog/tag/sap-gamification)
- [sap grc app (1)](https://www.aglea.com/blog/tag/sap-grc-app)
- [sap grc fiori (1)](https://www.aglea.com/blog/tag/sap-grc-fiori)
- [sap grc rm (1)](https://www.aglea.com/blog/tag/sap-grc-rm)
- [sap grc tables (1)](https://www.aglea.com/blog/tag/sap-grc-tables)
- [sap gui history (1)](https://www.aglea.com/blog/tag/sap-gui-history)
- [sap ilm gdpr (1)](https://www.aglea.com/blog/tag/sap-ilm-gdpr)
- [sap ips (1)](https://www.aglea.com/blog/tag/sap-ips)
- [sap masking (1)](https://www.aglea.com/blog/tag/sap-masking)
- [sap penetration test (1)](https://www.aglea.com/blog/tag/sap-penetration-test)
- [sap personalization (1)](https://www.aglea.com/blog/tag/sap-personalization)
- [sap roll out (1)](https://www.aglea.com/blog/tag/sap-roll-out)
- [sap scp logon (1)](https://www.aglea.com/blog/tag/sap-scp-logon)
- [sap security MEME (1)](https://www.aglea.com/blog/tag/sap-security-meme)
- [sap security checklist (1)](https://www.aglea.com/blog/tag/sap-security-checklist)
- [sap security integrator (1)](https://www.aglea.com/blog/tag/sap-security-integrator)
- [sap security teal (1)](https://www.aglea.com/blog/tag/sap-security-teal)
- [sap signavio (1)](https://www.aglea.com/blog/tag/sap-signavio)
- [sap splunk (1)](https://www.aglea.com/blog/tag/sap-splunk)
- [sap standard role (1)](https://www.aglea.com/blog/tag/sap-standard-role)
- [sap support package (1)](https://www.aglea.com/blog/tag/sap-support-package)
- [sap tabelle custom (1)](https://www.aglea.com/blog/tag/sap-tabelle-custom)
- [sap tdms (1)](https://www.aglea.com/blog/tag/sap-tdms)
- [sap tipo utente (1)](https://www.aglea.com/blog/tag/sap-tipo-utente)
- [sap translate (1)](https://www.aglea.com/blog/tag/sap-translate)
- [sap_all_only_view (1)](https://www.aglea.com/blog/tag/sap_all_only_view)
- [sap_gui (1)](https://www.aglea.com/blog/tag/sap_gui)
- [sap_new (1)](https://www.aglea.com/blog/tag/sap_new)
- [scc4 (1)](https://www.aglea.com/blog/tag/scc4)
- [scoodo log (1)](https://www.aglea.com/blog/tag/scoodo-log)
- [scrambling (1)](https://www.aglea.com/blog/tag/scrambling)
- [scrum sap (1)](https://www.aglea.com/blog/tag/scrum-sap)
- [secpol (1)](https://www.aglea.com/blog/tag/secpol)
- [security bridge (1)](https://www.aglea.com/blog/tag/security-bridge)
- [security operation center (1)](https://www.aglea.com/blog/tag/security-operation-center)
- [security template (1)](https://www.aglea.com/blog/tag/security-template)
- [security tools (1)](https://www.aglea.com/blog/tag/security-tools)
- [security weaver (1)](https://www.aglea.com/blog/tag/security-weaver)
- [self service (1)](https://www.aglea.com/blog/tag/self-service)
- [semplificare (1)](https://www.aglea.com/blog/tag/semplificare)
- [sentinel (1)](https://www.aglea.com/blog/tag/sentinel)
- [sicurezza codice ABAP (1)](https://www.aglea.com/blog/tag/sicurezza-codice-abap)
- [sicurezza dati (1)](https://www.aglea.com/blog/tag/sicurezza-dati)
- [sistema integrato (1)](https://www.aglea.com/blog/tag/sistema-integrato)
- [sod ruleset (1)](https://www.aglea.com/blog/tag/sod-ruleset)
- [sondaggi (1)](https://www.aglea.com/blog/tag/sondaggi)
- [sost (1)](https://www.aglea.com/blog/tag/sost)
- [sql (1)](https://www.aglea.com/blog/tag/sql)
- [sticker (1)](https://www.aglea.com/blog/tag/sticker)
- [su21 (1)](https://www.aglea.com/blog/tag/su21)
- [system integrator (1)](https://www.aglea.com/blog/tag/system-integrator)
- [tabelle SAP grc access control (1)](https://www.aglea.com/blog/tag/tabelle-sap-grc-access-control)
- [tassi di cambio (1)](https://www.aglea.com/blog/tag/tassi-di-cambio)
- [test autorizzazioni (1)](https://www.aglea.com/blog/tag/test-autorizzazioni)
- [traduzione ruoli (1)](https://www.aglea.com/blog/tag/traduzione-ruoli)
- [traduzione sap (1)](https://www.aglea.com/blog/tag/traduzione-sap)
- [ust04 (1)](https://www.aglea.com/blog/tag/ust04)
- [utenti sap (1)](https://www.aglea.com/blog/tag/utenti-sap)
- [utenze di sistema (1)](https://www.aglea.com/blog/tag/utenze-di-sistema)
- [virtual forge (1)](https://www.aglea.com/blog/tag/virtual-forge)
- [vpn (1)](https://www.aglea.com/blog/tag/vpn)
- [xiting (1)](https://www.aglea.com/blog/tag/xiting)

[Visualizza tutti](https://www.aglea.com/blog/conformit%C3%A0-aziendale-in-sap#)

## [SAP Security Blog AGLEA RSS Feed](https://www.aglea.com/blog/rss.xml)

Aglea s.r.l. - Soggetta alla direzione e coordinamento di Horsa S.p.A. - P. IVA: IT 03868780960 - 2026 | [Privacy Policy](https://www.aglea.com/privacy-policy/) - [Cookie Policy](https://www.aglea.com/cookie-policy) - [Whistleblowing](https://whistleblowing.horsa.it/)

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Massimo Manara",
    "url" : "https://www.aglea.com/blog/author/massimo-manara"
  },
  "dateModified" : "2024-06-14T09:19:17.850Z",
  "datePublished" : "2021-11-23T23:00:00.000Z",
  "headline" : "Conformità aziendale in SAP",
  "image" : [ "https://www.aglea.com/hubfs/Aglea/Imported_Blog_Media/Controlli%20SAP%20-%20personalizzazione-Jun-14-2024-09-18-23-9115-AM.png" ],
  "mainEntityOfPage" : {
    "@id" : "https://www.aglea.com/blog/conformità-aziendale-in-sap",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject"
    },
    "name" : "Horsa S.p.A."
  }
}
```