---
title: Sviluppatori SAP. Meglio un team di sviluppo interno o esterno?
description: Sviluppare in modo sicuro è alla base della sicurezza applicativa SAP, soprattutto per la parte custom. Conviene chiedere supporto all'esterno o sviluppare un competence center interno? Quali possono essere le soluzioni per controllare al meglio questo aspetto?
image: https://www.aglea.com/hubfs/Aglea/Imported_Blog_Media/Programmazione%20sicura%20SAP-4.jpg
---

[linkedin](https://www.linkedin.com/company/292350?trk=vsrp_companies_res_name&trkInfo=VSRPsearchId%3A3373431891426179412478%2CVSRPtargetId%3A292350%2CVSRPcmpt%3Aprimary) [YouTube](https://www.youtube.com/c/AgleaSAPSecurity?sub_confirmation=1) [Twitter](https://twitter.com/AgleaItaly?lang=it)

[![Logo-Aglea-horsa-company](https://www.aglea.com/hubfs/Aglea/Aglea_November2018%20Theme/Images/Logo-Aglea-horsa-company.webp) ](https://www.aglea.com/)

# Sviluppatori SAP. Meglio un team di sviluppo interno o esterno?

# Sviluppatori SAP. Meglio un team di sviluppo interno o esterno?

Posted by [Massimo Manara](https://www.aglea.com/blog/author/massimo-manara) on Sep 18, 2019 12:00:00 AM

- [Tweet](https://twitter.com/share)

 

Avere all’interno dell’azienda know how anche sulla parte degli sviluppi SAP è sicuramente importante. **Soprattutto per non dipendere da terzi anche nel caso di problematiche semplici.**

![Programmazione sicura SAP](https://www.aglea.com/hubfs/Aglea/Imported_Blog_Media/Programmazione%20sicura%20SAP-4.jpg)

 

Non parliamo direttamente di sviluppatori ABAP. Ma di quali sono o potrebbero essere gli impatti **nell’avere un gruppo interno di sviluppatori per quanto riguarda gli aspetti security**.

 

**È meglio, da un punto di vista di security SAP, avere un team di sviluppo interno oppure esterno?**

**

## Come controllare gli sviluppi dal punto di vista security SAP?

Una delle difficoltà maggiori è quella di **verificare se gli sviluppi software siano sicuri**. Non è semplice farlo in quanto presuppone una conoscenza tecnica molto verticale del linguaggio ed una disponibilità di tempo che può non essere indifferente.

Spesso queste due risorse sono difficili da trovare in azienda e probabilmente anche ingiustificate.

 

**Riuscire ad identificare problemi di sicurezza durante lo sviluppo ha costi più bassi rispetto a scoprire anomalie di programmi già attivi ed utilizzati.**

 

Esistono diversi modi in SAP per controllare gli sviluppi dal punto di vista della sicurezza.

 

- Tramite la transazione SCI (Source Code Inspector) di SAP, oppure tramite transazione SE38, vedi immagine sotto è possibile testare i programmi sotto diverse metriche, non solo security SAP:

 

![Code Inspector](https://www.aglea.com/hs-fs/hubfs/Aglea/Imported_Blog_Media/Code%20Inspector-Jun-14-2024-09-16-43-4017-AM.png?width=280&name=Code%20Inspector-Jun-14-2024-09-16-43-4017-AM.png)

 

- Tramite il software a pagamento di SAP chiamato Code Vulnerability Analysis
- Tramite software terzi, specifici per l’ambito SAP oppure general purpose ad esempio: 
    - Onapsis, specifico per SAP  
      Guarda qui una video intervista tra Onapsis e Kiuwann
    - Security Bridge specifico per SAP ([leggi anche qui](https://www.aglea.com/blog/sap-cyber-security-per-pmi)) 
          - Security Bridge è anche una suite di Threat Intelligence
    - Kiuwan, general purpose
    - CAST, general purpose
    - Fortify, general purpose

 

## Cosa può comportare avere un team di sviluppo interno

Nell'attività di supporto che l'IT svolge possono essere presenti diverse tipologie di supporto:

- In alcuni casi l’IT si sostituisce al business
- Può non esservi un team coordinato di lavoro. Ogni area di processo lavora in modo autonomo
- L’IT in caso di urgenze trova la soluzione più veloce, non necessariamente la migliore

 

**La sostituzione del business non è mai un modo corretto di gestione (anche se in alcune situazioni può apparentemente semplificare la gestione).** Potrebbe infatti portare con se delle anomalie di processo che emergerebbero in fase di separazione dei compiti ad esempio.

 

L'emergenza può portare alla definizione compulsiva di transazioni custom di fatto ad personam. Ogni dipartimento richiede delle personalizzazioni specifiche e non si abitua o trova funzionalità standard che possa essere utilizzata. Spesso confondendo i sistemi transazionali (OLTP Online Transaction Processing) con quelli di analisi (OLAP Online Analysis Processing).

 

**Ogni oggetto custom definito nel sistema ha un costo di gestione non indifferente. Molte delle funzionalità custom dopo qualche anno non sono più utilizzate. **

 

## È meglio un team di sviluppo esterno quindi?

Esistono sicuramente dei vantaggi. **Ma anche punti di attenzione da tenere in considerazione.**

 

Quali sono i vantaggi di avere un [team di sviluppo](https://www.aglea.com/blog/sviluppatori-sap.-meglio-un-team-di-sviluppo-interno-o-esterno) esterno:

- Maggiore documentazione e formalizzazione
- Supporto migliore sui processi di business
- Maggiore forza lavoro in caso di necessità

 

Attenzione, gli aspetti sopra possono essere dei punti di vantaggio. **Ma non sempre è così**. Gli accordi contrattuali in alcuni casi potrebbero favorire o sfavorire alcuni comportamenti virtuosi da parte del fornitore di turno.

 

**È quindi fondamentale avere internamente un referente che possa capire anche dal punto di vista tecnico le proposte, valutarle prima di procedere con lo sviluppo. Soprattutto sugli aspetti [Security SAP](https://www.aglea.com/sap-security).**

 

In molti casi, infatti, se nei documenti di specifiche non sono presenti aspetti autorizzativi e/o sviluppo sicuro, questi non sono considerati.

 

È importante inoltre dotarsi di strumenti che possano certificare l’operato di società terze di sviluppo. Gli strumenti citati all'inizio possono essere di aiuto nel definire delle soglie di accettabilità degli sviluppi.

 

**Sarà infatti possibile inserire nei contratti delle clausole specifiche di conformità basate su analisi realizzate da strumenti terzi di controllo. **

 

## Conclusioni, cosa conviene fare?

Non in tutti gli scenari è possibile applicare lo stesso criterio di scelta. Tuttavia, alcune considerazioni possono essere comuni.

- **Avere un referente interno che segua gli sviluppi è fondamentale**. Questo permette di valutare cosa viene proposto dall'eventuale fornitore ed effettuare un confronto tra le parti.
- Appoggiarsi all'esterno è utile, **ma se si può controllare in maniera automatica cosa viene fatto e come**
- **Lo sviluppo sicuro è alla base della sicurezza applicativa dell'ERP, soprattutto per gli aspetti riguardanti gli sviluppi custom SAP.**

****

 Topics: [programmazione sicura](https://www.aglea.com/blog/tag/programmazione-sicura), [CVA](https://www.aglea.com/blog/tag/cva), [codice sicuro SAP](https://www.aglea.com/blog/tag/codice-sicuro-sap)

### Iscriviti qui!

### Blog Aglea, cosa puoi trovare?

Ogni mercoledì pubblichiamo articoli, interviste e documenti relativi alla security SAP.

Cosa puoi trovare:

- Suggerimenti su come mettere in sicurezza i sistemi SAP
- Come fare a … (How To)
- Checklist
- Gli errori comuni che spesso vengono fatti in ambito Security SAP
- Interviste con esperti del settore
- Chi è AGLEA quale è la nostra vision security SAP

### Post recenti

### Post By Topic

- [SAP Security (32)](https://www.aglea.com/blog/tag/sap-security)
- [SAP GRC (24)](https://www.aglea.com/blog/tag/sap-grc)
- [audit sap (22)](https://www.aglea.com/blog/tag/audit-sap)
- [fiori launchpad (20)](https://www.aglea.com/blog/tag/fiori-launchpad)
- [pfcg (19)](https://www.aglea.com/blog/tag/pfcg)
- [authorization concept (18)](https://www.aglea.com/blog/tag/authorization-concept)
- [cyber security (18)](https://www.aglea.com/blog/tag/cyber-security)
- [SAP audit (17)](https://www.aglea.com/blog/tag/sap-audit)
- [audit (16)](https://www.aglea.com/blog/tag/audit)
- [gdpr (16)](https://www.aglea.com/blog/tag/gdpr)
- [sap cyber security (16)](https://www.aglea.com/blog/tag/sap-cyber-security)
- [auditing (15)](https://www.aglea.com/blog/tag/auditing)
- [sap security blog (14)](https://www.aglea.com/blog/tag/sap-security-blog)
- [supporto sap ams (14)](https://www.aglea.com/blog/tag/supporto-sap-ams)
- [PFCG SAP transaction (13)](https://www.aglea.com/blog/tag/pfcg-sap-transaction)
- [SAP Cloud (13)](https://www.aglea.com/blog/tag/sap-cloud)
- [sap FIORI (13)](https://www.aglea.com/blog/tag/sap-fiori)
- [libro SAP (12)](https://www.aglea.com/blog/tag/libro-sap)
- [sod (12)](https://www.aglea.com/blog/tag/sod)
- [SAP GDPR (11)](https://www.aglea.com/blog/tag/sap-gdpr)
- [sap password (11)](https://www.aglea.com/blog/tag/sap-password)
- [sap vulnerability (11)](https://www.aglea.com/blog/tag/sap-vulnerability)
- [SAP cloud identity services (10)](https://www.aglea.com/blog/tag/sap-cloud-identity-services)
- [Segregation of duties (10)](https://www.aglea.com/blog/tag/segregation-of-duties)
- [vulnerability assessment (10)](https://www.aglea.com/blog/tag/vulnerability-assessment)
- [sap btp (9)](https://www.aglea.com/blog/tag/sap-btp)
- [sap license auditing (9)](https://www.aglea.com/blog/tag/sap-license-auditing)
- [SAP Cloud Security (8)](https://www.aglea.com/blog/tag/sap-cloud-security)
- [SAP FIORI Security (8)](https://www.aglea.com/blog/tag/sap-fiori-security)
- [SAP HR (8)](https://www.aglea.com/blog/tag/sap-hr)
- [consulenza sap security (8)](https://www.aglea.com/blog/tag/consulenza-sap-security)
- [idm (8)](https://www.aglea.com/blog/tag/idm)
- [secure coding sap (8)](https://www.aglea.com/blog/tag/secure-coding-sap)
- [security audit log (8)](https://www.aglea.com/blog/tag/security-audit-log)
- [siem (8)](https://www.aglea.com/blog/tag/siem)
- [threat detection (8)](https://www.aglea.com/blog/tag/threat-detection)
- [upgrade (8)](https://www.aglea.com/blog/tag/upgrade)
- [FIORI Security (7)](https://www.aglea.com/blog/tag/fiori-security)
- [S/4HANA (7)](https://www.aglea.com/blog/tag/s-4hana)
- [SAP IAG (7)](https://www.aglea.com/blog/tag/sap-iag)
- [SAP LOG (7)](https://www.aglea.com/blog/tag/sap-log)
- [User Access Management (7)](https://www.aglea.com/blog/tag/user-access-management)
- [governance (7)](https://www.aglea.com/blog/tag/governance)
- [internal audit (7)](https://www.aglea.com/blog/tag/internal-audit)
- [sap consulenza security (7)](https://www.aglea.com/blog/tag/sap-consulenza-security)
- [sap fiori space (7)](https://www.aglea.com/blog/tag/sap-fiori-space)
- [sap grc 12 (7)](https://www.aglea.com/blog/tag/sap-grc-12)
- [security ams (7)](https://www.aglea.com/blog/tag/security-ams)
- [su53 (7)](https://www.aglea.com/blog/tag/su53)
- [HANA Security (6)](https://www.aglea.com/blog/tag/hana-security)
- [SAP ECC (6)](https://www.aglea.com/blog/tag/sap-ecc)
- [autorizzazioni sap (6)](https://www.aglea.com/blog/tag/autorizzazioni-sap)
- [identity management system (6)](https://www.aglea.com/blog/tag/identity-management-system)
- [sap patch (6)](https://www.aglea.com/blog/tag/sap-patch)
- [ISO (5)](https://www.aglea.com/blog/tag/iso)
- [SAP Identity and Access Governance (5)](https://www.aglea.com/blog/tag/sap-identity-and-access-governance)
- [SU01 sap (5)](https://www.aglea.com/blog/tag/su01-sap)
- [access management (5)](https://www.aglea.com/blog/tag/access-management)
- [authorization model (5)](https://www.aglea.com/blog/tag/authorization-model)
- [controlli interni (5)](https://www.aglea.com/blog/tag/controlli-interni)
- [cyber security culture (5)](https://www.aglea.com/blog/tag/cyber-security-culture)
- [data loss prevention (5)](https://www.aglea.com/blog/tag/data-loss-prevention)
- [documentazione sap security (5)](https://www.aglea.com/blog/tag/documentazione-sap-security)
- [log sap (5)](https://www.aglea.com/blog/tag/log-sap)
- [oggetti autorizzativi critici (5)](https://www.aglea.com/blog/tag/oggetti-autorizzativi-critici)
- [rfc security (5)](https://www.aglea.com/blog/tag/rfc-security)
- [ruoli (5)](https://www.aglea.com/blog/tag/ruoli)
- [sap authorization review (5)](https://www.aglea.com/blog/tag/sap-authorization-review)
- [sap fue (5)](https://www.aglea.com/blog/tag/sap-fue)
- [sap_all (5)](https://www.aglea.com/blog/tag/sap_all)
- [securitybridge (5)](https://www.aglea.com/blog/tag/securitybridge)
- [sicurezza sap (5)](https://www.aglea.com/blog/tag/sicurezza-sap)
- [sviluppo codice sicuro (5)](https://www.aglea.com/blog/tag/sviluppo-codice-sicuro)
- [userid (5)](https://www.aglea.com/blog/tag/userid)
- [IAG (4)](https://www.aglea.com/blog/tag/iag)
- [RISE with SAP (4)](https://www.aglea.com/blog/tag/rise-with-sap)
- [SAP IDM (4)](https://www.aglea.com/blog/tag/sap-idm)
- [aglea (4)](https://www.aglea.com/blog/tag/aglea)
- [code vulnerability analysis (4)](https://www.aglea.com/blog/tag/code-vulnerability-analysis)
- [data privacy (4)](https://www.aglea.com/blog/tag/data-privacy)
- [fraud management (4)](https://www.aglea.com/blog/tag/fraud-management)
- [itgc (4)](https://www.aglea.com/blog/tag/itgc)
- [microsoft (4)](https://www.aglea.com/blog/tag/microsoft)
- [patch (4)](https://www.aglea.com/blog/tag/patch)
- [sap data masking (4)](https://www.aglea.com/blog/tag/sap-data-masking)
- [sap gui (4)](https://www.aglea.com/blog/tag/sap-gui)
- [sap gui security (4)](https://www.aglea.com/blog/tag/sap-gui-security)
- [sap hana (4)](https://www.aglea.com/blog/tag/sap-hana)
- [sap logon (4)](https://www.aglea.com/blog/tag/sap-logon)
- [sap super user (4)](https://www.aglea.com/blog/tag/sap-super-user)
- [security awareness (4)](https://www.aglea.com/blog/tag/security-awareness)
- [test system (4)](https://www.aglea.com/blog/tag/test-system)
- [workflow security SAP (4)](https://www.aglea.com/blog/tag/workflow-security-sap)
- [AI (3)](https://www.aglea.com/blog/tag/ai)
- [HANA (3)](https://www.aglea.com/blog/tag/hana)
- [RISE (3)](https://www.aglea.com/blog/tag/rise)
- [Risk Management (3)](https://www.aglea.com/blog/tag/risk-management)
- [SAP AUDIT LOG (3)](https://www.aglea.com/blog/tag/sap-audit-log)
- [SAP NOW (3)](https://www.aglea.com/blog/tag/sap-now)
- [Single Sing On (3)](https://www.aglea.com/blog/tag/single-sing-on)
- [UCON (3)](https://www.aglea.com/blog/tag/ucon)
- [UI logging (3)](https://www.aglea.com/blog/tag/ui-logging)
- [amministratore di sistema (3)](https://www.aglea.com/blog/tag/amministratore-di-sistema)
- [cloud platform (3)](https://www.aglea.com/blog/tag/cloud-platform)
- [consulenti (3)](https://www.aglea.com/blog/tag/consulenti)
- [consulenti sap security (3)](https://www.aglea.com/blog/tag/consulenti-sap-security)
- [corsi sap (3)](https://www.aglea.com/blog/tag/corsi-sap)
- [crittografia SAP (3)](https://www.aglea.com/blog/tag/crittografia-sap)
- [e-learning (3)](https://www.aglea.com/blog/tag/e-learning)
- [emergency users (3)](https://www.aglea.com/blog/tag/emergency-users)
- [formazione sap (3)](https://www.aglea.com/blog/tag/formazione-sap)
- [mail security sap (3)](https://www.aglea.com/blog/tag/mail-security-sap)
- [manuali sap security (3)](https://www.aglea.com/blog/tag/manuali-sap-security)
- [password policy (3)](https://www.aglea.com/blog/tag/password-policy)
- [process control (3)](https://www.aglea.com/blog/tag/process-control)
- [process mining (3)](https://www.aglea.com/blog/tag/process-mining)
- [processi security (3)](https://www.aglea.com/blog/tag/processi-security)
- [profili sap (3)](https://www.aglea.com/blog/tag/profili-sap)
- [reporting (3)](https://www.aglea.com/blog/tag/reporting)
- [rfc (3)](https://www.aglea.com/blog/tag/rfc)
- [rpa sap security (3)](https://www.aglea.com/blog/tag/rpa-sap-security)
- [sap compliance (3)](https://www.aglea.com/blog/tag/sap-compliance)
- [sap custom (3)](https://www.aglea.com/blog/tag/sap-custom)
- [sap data obfuscation (3)](https://www.aglea.com/blog/tag/sap-data-obfuscation)
- [sap dati personali (3)](https://www.aglea.com/blog/tag/sap-dati-personali)
- [sap ias (3)](https://www.aglea.com/blog/tag/sap-ias)
- [sap mail (3)](https://www.aglea.com/blog/tag/sap-mail)
- [sap siem (3)](https://www.aglea.com/blog/tag/sap-siem)
- [sap sso (3)](https://www.aglea.com/blog/tag/sap-sso)
- [sap training (3)](https://www.aglea.com/blog/tag/sap-training)
- [se16 (3)](https://www.aglea.com/blog/tag/se16)
- [sicurezza dei dati sap (3)](https://www.aglea.com/blog/tag/sicurezza-dei-dati-sap)
- [su25 (3)](https://www.aglea.com/blog/tag/su25)
- [suim (3)](https://www.aglea.com/blog/tag/suim)
- [ticket management system (3)](https://www.aglea.com/blog/tag/ticket-management-system)
- [training (3)](https://www.aglea.com/blog/tag/training)
- [transazioni sap (3)](https://www.aglea.com/blog/tag/transazioni-sap)
- [zero trust security (3)](https://www.aglea.com/blog/tag/zero-trust-security)
- [27001 (2)](https://www.aglea.com/blog/tag/27001)
- [NIS2 (2)](https://www.aglea.com/blog/tag/nis2)
- [SAP GRC Process Control (2)](https://www.aglea.com/blog/tag/sap-grc-process-control)
- [SAP Gateway security (2)](https://www.aglea.com/blog/tag/sap-gateway-security)
- [Trace autorizzazioni SAP (2)](https://www.aglea.com/blog/tag/trace-autorizzazioni-sap)
- [UI Masking (2)](https://www.aglea.com/blog/tag/ui-masking)
- [agleasapsecurity (2)](https://www.aglea.com/blog/tag/agleasapsecurity)
- [ams (2)](https://www.aglea.com/blog/tag/ams)
- [corso (2)](https://www.aglea.com/blog/tag/corso)
- [custom (2)](https://www.aglea.com/blog/tag/custom)
- [cyber security exposure (2)](https://www.aglea.com/blog/tag/cyber-security-exposure)
- [epi-use (2)](https://www.aglea.com/blog/tag/epi-use)
- [eventi (2)](https://www.aglea.com/blog/tag/eventi)
- [gxp (2)](https://www.aglea.com/blog/tag/gxp)
- [intelligenza artificiale (2)](https://www.aglea.com/blog/tag/intelligenza-artificiale)
- [joule (2)](https://www.aglea.com/blog/tag/joule)
- [organizzazione (2)](https://www.aglea.com/blog/tag/organizzazione)
- [profili (2)](https://www.aglea.com/blog/tag/profili)
- [progetti sap security (2)](https://www.aglea.com/blog/tag/progetti-sap-security)
- [programmazione sicura (2)](https://www.aglea.com/blog/tag/programmazione-sicura)
- [quality (2)](https://www.aglea.com/blog/tag/quality)
- [quotazione borsa (2)](https://www.aglea.com/blog/tag/quotazione-borsa)
- [s_tabu_dis (2)](https://www.aglea.com/blog/tag/s_tabu_dis)
- [sap business role (2)](https://www.aglea.com/blog/tag/sap-business-role)
- [sap catalog (2)](https://www.aglea.com/blog/tag/sap-catalog)
- [sap data protection (2)](https://www.aglea.com/blog/tag/sap-data-protection)
- [sap developer (2)](https://www.aglea.com/blog/tag/sap-developer)
- [sap enterprise threat detection (2)](https://www.aglea.com/blog/tag/sap-enterprise-threat-detection)
- [sap etd (2)](https://www.aglea.com/blog/tag/sap-etd)
- [sap gxp compliance (2)](https://www.aglea.com/blog/tag/sap-gxp-compliance)
- [sap ilm (2)](https://www.aglea.com/blog/tag/sap-ilm)
- [sap italia (2)](https://www.aglea.com/blog/tag/sap-italia)
- [sap menu (2)](https://www.aglea.com/blog/tag/sap-menu)
- [sap query (2)](https://www.aglea.com/blog/tag/sap-query)
- [sap router security (2)](https://www.aglea.com/blog/tag/sap-router-security)
- [sap security guidelines (2)](https://www.aglea.com/blog/tag/sap-security-guidelines)
- [sap security note (2)](https://www.aglea.com/blog/tag/sap-security-note)
- [sap security partner (2)](https://www.aglea.com/blog/tag/sap-security-partner)
- [sap security patch day (2)](https://www.aglea.com/blog/tag/sap-security-patch-day)
- [sap security tools (2)](https://www.aglea.com/blog/tag/sap-security-tools)
- [sap security video (2)](https://www.aglea.com/blog/tag/sap-security-video)
- [sap sos (2)](https://www.aglea.com/blog/tag/sap-sos)
- [sap workflow (2)](https://www.aglea.com/blog/tag/sap-workflow)
- [se16n (2)](https://www.aglea.com/blog/tag/se16n)
- [secure operation map (2)](https://www.aglea.com/blog/tag/secure-operation-map)
- [slaw (2)](https://www.aglea.com/blog/tag/slaw)
- [smartworking (2)](https://www.aglea.com/blog/tag/smartworking)
- [soar (2)](https://www.aglea.com/blog/tag/soar)
- [social engineering (2)](https://www.aglea.com/blog/tag/social-engineering)
- [solution manager (2)](https://www.aglea.com/blog/tag/solution-manager)
- [success Factors (2)](https://www.aglea.com/blog/tag/success-factors)
- [super utenti sap (2)](https://www.aglea.com/blog/tag/super-utenti-sap)
- [system users (2)](https://www.aglea.com/blog/tag/system-users)
- [tabelle (2)](https://www.aglea.com/blog/tag/tabelle)
- [trasformazione digitale (2)](https://www.aglea.com/blog/tag/trasformazione-digitale)
- [usmm (2)](https://www.aglea.com/blog/tag/usmm)
- [youtube aglea (2)](https://www.aglea.com/blog/tag/youtube-aglea)
- [youtube sap (2)](https://www.aglea.com/blog/tag/youtube-sap)
- [10bklaze (1)](https://www.aglea.com/blog/tag/10bklaze)
- [20000 (1)](https://www.aglea.com/blog/tag/20000)
- [312 (1)](https://www.aglea.com/blog/tag/312)
- [9001 (1)](https://www.aglea.com/blog/tag/9001)
- [ABAP (1)](https://www.aglea.com/blog/tag/abap)
- [Barcellona (1)](https://www.aglea.com/blog/tag/barcellona)
- [CIAM (1)](https://www.aglea.com/blog/tag/ciam)
- [CSR (1)](https://www.aglea.com/blog/tag/csr)
- [CVA (1)](https://www.aglea.com/blog/tag/cva)
- [CVE-2021-44228 (1)](https://www.aglea.com/blog/tag/cve-2021-44228)
- [Cloud ALM (1)](https://www.aglea.com/blog/tag/cloud-alm)
- [DPO (1)](https://www.aglea.com/blog/tag/dpo)
- [ERM (1)](https://www.aglea.com/blog/tag/erm)
- [Enterprise risk management (1)](https://www.aglea.com/blog/tag/enterprise-risk-management)
- [GROW (1)](https://www.aglea.com/blog/tag/grow)
- [Gestione del rischio aziendale (1)](https://www.aglea.com/blog/tag/gestione-del-rischio-aziendale)
- [HANA Roles (1)](https://www.aglea.com/blog/tag/hana-roles)
- [HR Data Reporting (1)](https://www.aglea.com/blog/tag/hr-data-reporting)
- [IAS (1)](https://www.aglea.com/blog/tag/ias)
- [IPS (1)](https://www.aglea.com/blog/tag/ips)
- [Liste distribuzione SAP (1)](https://www.aglea.com/blog/tag/liste-distribuzione-sap)
- [Log4Shell SAP (1)](https://www.aglea.com/blog/tag/log4shell-sap)
- [Milano (1)](https://www.aglea.com/blog/tag/milano)
- [OKR (1)](https://www.aglea.com/blog/tag/okr)
- [Onboarding (1)](https://www.aglea.com/blog/tag/onboarding)
- [P-user (1)](https://www.aglea.com/blog/tag/p-user)
- [Portale SAP note (1)](https://www.aglea.com/blog/tag/portale-sap-note)
- [Privilege Access Management (1)](https://www.aglea.com/blog/tag/privilege-access-management)
- [S-user (1)](https://www.aglea.com/blog/tag/s-user)
- [SAP ABAC (1)](https://www.aglea.com/blog/tag/sap-abac)
- [SAP Assurance and Compliance Software (1)](https://www.aglea.com/blog/tag/sap-assurance-and-compliance-software)
- [SAP C4C (1)](https://www.aglea.com/blog/tag/sap-c4c)
- [SAP DAM (1)](https://www.aglea.com/blog/tag/sap-dam)
- [SAP DLP (1)](https://www.aglea.com/blog/tag/sap-dlp)
- [SAP DRM (1)](https://www.aglea.com/blog/tag/sap-drm)
- [SAP ERP cloud private (1)](https://www.aglea.com/blog/tag/sap-erp-cloud-private)
- [SAP FKOM (1)](https://www.aglea.com/blog/tag/sap-fkom)
- [SAP Fraud Management (1)](https://www.aglea.com/blog/tag/sap-fraud-management)
- [SAP RBAC (1)](https://www.aglea.com/blog/tag/sap-rbac)
- [SAP RECON (1)](https://www.aglea.com/blog/tag/sap-recon)
- [SAP Sales (1)](https://www.aglea.com/blog/tag/sap-sales)
- [SAP Table (1)](https://www.aglea.com/blog/tag/sap-table)
- [SECURITY PATTERN ANALYSIS (1)](https://www.aglea.com/blog/tag/security-pattern-analysis)
- [SLA (1)](https://www.aglea.com/blog/tag/sla)
- [SOX (1)](https://www.aglea.com/blog/tag/sox)
- [SPOOL (1)](https://www.aglea.com/blog/tag/spool)
- [ST01 (1)](https://www.aglea.com/blog/tag/st01)
- [STAUTHTRACE (1)](https://www.aglea.com/blog/tag/stauthtrace)
- [Statistiche security SAP (1)](https://www.aglea.com/blog/tag/statistiche-security-sap)
- [admin (1)](https://www.aglea.com/blog/tag/admin)
- [aglea tribe (1)](https://www.aglea.com/blog/tag/aglea-tribe)
- [analisi dei rischi (1)](https://www.aglea.com/blog/tag/analisi-dei-rischi)
- [azure (1)](https://www.aglea.com/blog/tag/azure)
- [backup (1)](https://www.aglea.com/blog/tag/backup)
- [biolock sap (1)](https://www.aglea.com/blog/tag/biolock-sap)
- [biometria (1)](https://www.aglea.com/blog/tag/biometria)
- [blacklist sap (1)](https://www.aglea.com/blog/tag/blacklist-sap)
- [bot (1)](https://www.aglea.com/blog/tag/bot)
- [brand (1)](https://www.aglea.com/blog/tag/brand)
- [certificazioni sap (1)](https://www.aglea.com/blog/tag/certificazioni-sap)
- [chatGPT (1)](https://www.aglea.com/blog/tag/chatgpt)
- [ciso (1)](https://www.aglea.com/blog/tag/ciso)
- [cloud connector (1)](https://www.aglea.com/blog/tag/cloud-connector)
- [codice sicuro SAP (1)](https://www.aglea.com/blog/tag/codice-sicuro-sap)
- [compatibility packs (1)](https://www.aglea.com/blog/tag/compatibility-packs)
- [continuità del servizio (1)](https://www.aglea.com/blog/tag/continuità-del-servizio)
- [customization sap (1)](https://www.aglea.com/blog/tag/customization-sap)
- [cyber security deception (1)](https://www.aglea.com/blog/tag/cyber-security-deception)
- [data access subject request (1)](https://www.aglea.com/blog/tag/data-access-subject-request)
- [data subject request gdpr (1)](https://www.aglea.com/blog/tag/data-subject-request-gdpr)
- [delete user (1)](https://www.aglea.com/blog/tag/delete-user)
- [developer (1)](https://www.aglea.com/blog/tag/developer)
- [documentazione SAP GRC (1)](https://www.aglea.com/blog/tag/documentazione-sap-grc)
- [documentazione di progetto (1)](https://www.aglea.com/blog/tag/documentazione-di-progetto)
- [dsr (1)](https://www.aglea.com/blog/tag/dsr)
- [dynamic authorization management (1)](https://www.aglea.com/blog/tag/dynamic-authorization-management)
- [esg (1)](https://www.aglea.com/blog/tag/esg)
- [esterni (1)](https://www.aglea.com/blog/tag/esterni)
- [exchange rates (1)](https://www.aglea.com/blog/tag/exchange-rates)
- [external users management (1)](https://www.aglea.com/blog/tag/external-users-management)
- [falsi positivi (1)](https://www.aglea.com/blog/tag/falsi-positivi)
- [feedback (1)](https://www.aglea.com/blog/tag/feedback)
- [firefighter (1)](https://www.aglea.com/blog/tag/firefighter)
- [firefighter HANA (1)](https://www.aglea.com/blog/tag/firefighter-hana)
- [flash (1)](https://www.aglea.com/blog/tag/flash)
- [fornitori sap (1)](https://www.aglea.com/blog/tag/fornitori-sap)
- [ftp (1)](https://www.aglea.com/blog/tag/ftp)
- [go-live (1)](https://www.aglea.com/blog/tag/go-live)
- [grc ram (1)](https://www.aglea.com/blog/tag/grc-ram)
- [handover autorizzazioni (1)](https://www.aglea.com/blog/tag/handover-autorizzazioni)
- [hardening (1)](https://www.aglea.com/blog/tag/hardening)
- [horsa (1)](https://www.aglea.com/blog/tag/horsa)
- [integrazioni sap (1)](https://www.aglea.com/blog/tag/integrazioni-sap)
- [intune (1)](https://www.aglea.com/blog/tag/intune)
- [lavoro agile (1)](https://www.aglea.com/blog/tag/lavoro-agile)
- [libri (1)](https://www.aglea.com/blog/tag/libri)
- [malware (1)](https://www.aglea.com/blog/tag/malware)
- [mandanti (1)](https://www.aglea.com/blog/tag/mandanti)
- [metodologia sap activate (1)](https://www.aglea.com/blog/tag/metodologia-sap-activate)
- [microsoft planner (1)](https://www.aglea.com/blog/tag/microsoft-planner)
- [microsoft stream (1)](https://www.aglea.com/blog/tag/microsoft-stream)
- [multicompany sap security (1)](https://www.aglea.com/blog/tag/multicompany-sap-security)
- [multiple logon (1)](https://www.aglea.com/blog/tag/multiple-logon)
- [naming convention (1)](https://www.aglea.com/blog/tag/naming-convention)
- [nist (1)](https://www.aglea.com/blog/tag/nist)
- [nuovi assunti (1)](https://www.aglea.com/blog/tag/nuovi-assunti)
- [ob08 (1)](https://www.aglea.com/blog/tag/ob08)
- [pa20 (1)](https://www.aglea.com/blog/tag/pa20)
- [parameter sap (1)](https://www.aglea.com/blog/tag/parameter-sap)
- [partner sap (1)](https://www.aglea.com/blog/tag/partner-sap)
- [pfud (1)](https://www.aglea.com/blog/tag/pfud)
- [podcast sap security (1)](https://www.aglea.com/blog/tag/podcast-sap-security)
- [postmand sap api (1)](https://www.aglea.com/blog/tag/postmand-sap-api)
- [progetti security sap (1)](https://www.aglea.com/blog/tag/progetti-security-sap)
- [quantum (1)](https://www.aglea.com/blog/tag/quantum)
- [remediation (1)](https://www.aglea.com/blog/tag/remediation)
- [remote access (1)](https://www.aglea.com/blog/tag/remote-access)
- [rfc destination (1)](https://www.aglea.com/blog/tag/rfc-destination)
- [risorse umane (1)](https://www.aglea.com/blog/tag/risorse-umane)
- [role transport (1)](https://www.aglea.com/blog/tag/role-transport)
- [s_tabu_nam (1)](https://www.aglea.com/blog/tag/s_tabu_nam)
- [s_tabu_rfc (1)](https://www.aglea.com/blog/tag/s_tabu_rfc)
- [sailpoint (1)](https://www.aglea.com/blog/tag/sailpoint)
- [sap TechEd (1)](https://www.aglea.com/blog/tag/sap-teched)
- [sap access control (1)](https://www.aglea.com/blog/tag/sap-access-control)
- [sap acronimi (1)](https://www.aglea.com/blog/tag/sap-acronimi)
- [sap activate (1)](https://www.aglea.com/blog/tag/sap-activate)
- [sap add on (1)](https://www.aglea.com/blog/tag/sap-add-on)
- [sap antivirus (1)](https://www.aglea.com/blog/tag/sap-antivirus)
- [sap asap (1)](https://www.aglea.com/blog/tag/sap-asap)
- [sap assure (1)](https://www.aglea.com/blog/tag/sap-assure)
- [sap backup (1)](https://www.aglea.com/blog/tag/sap-backup)
- [sap bis (1)](https://www.aglea.com/blog/tag/sap-bis)
- [sap business continuity (1)](https://www.aglea.com/blog/tag/sap-business-continuity)
- [sap business integrity screening (1)](https://www.aglea.com/blog/tag/sap-business-integrity-screening)
- [sap business partner (1)](https://www.aglea.com/blog/tag/sap-business-partner)
- [sap bw (1)](https://www.aglea.com/blog/tag/sap-bw)
- [sap covid (1)](https://www.aglea.com/blog/tag/sap-covid)
- [sap cua (1)](https://www.aglea.com/blog/tag/sap-cua)
- [sap cva (1)](https://www.aglea.com/blog/tag/sap-cva)
- [sap earlywatch (1)](https://www.aglea.com/blog/tag/sap-earlywatch)
- [sap frodi (1)](https://www.aglea.com/blog/tag/sap-frodi)
- [sap gamification (1)](https://www.aglea.com/blog/tag/sap-gamification)
- [sap grc app (1)](https://www.aglea.com/blog/tag/sap-grc-app)
- [sap grc fiori (1)](https://www.aglea.com/blog/tag/sap-grc-fiori)
- [sap grc rm (1)](https://www.aglea.com/blog/tag/sap-grc-rm)
- [sap grc tables (1)](https://www.aglea.com/blog/tag/sap-grc-tables)
- [sap gui history (1)](https://www.aglea.com/blog/tag/sap-gui-history)
- [sap ilm gdpr (1)](https://www.aglea.com/blog/tag/sap-ilm-gdpr)
- [sap ips (1)](https://www.aglea.com/blog/tag/sap-ips)
- [sap masking (1)](https://www.aglea.com/blog/tag/sap-masking)
- [sap penetration test (1)](https://www.aglea.com/blog/tag/sap-penetration-test)
- [sap personalization (1)](https://www.aglea.com/blog/tag/sap-personalization)
- [sap roll out (1)](https://www.aglea.com/blog/tag/sap-roll-out)
- [sap scp logon (1)](https://www.aglea.com/blog/tag/sap-scp-logon)
- [sap security MEME (1)](https://www.aglea.com/blog/tag/sap-security-meme)
- [sap security checklist (1)](https://www.aglea.com/blog/tag/sap-security-checklist)
- [sap security integrator (1)](https://www.aglea.com/blog/tag/sap-security-integrator)
- [sap security teal (1)](https://www.aglea.com/blog/tag/sap-security-teal)
- [sap signavio (1)](https://www.aglea.com/blog/tag/sap-signavio)
- [sap splunk (1)](https://www.aglea.com/blog/tag/sap-splunk)
- [sap standard role (1)](https://www.aglea.com/blog/tag/sap-standard-role)
- [sap support package (1)](https://www.aglea.com/blog/tag/sap-support-package)
- [sap tabelle custom (1)](https://www.aglea.com/blog/tag/sap-tabelle-custom)
- [sap tdms (1)](https://www.aglea.com/blog/tag/sap-tdms)
- [sap tipo utente (1)](https://www.aglea.com/blog/tag/sap-tipo-utente)
- [sap translate (1)](https://www.aglea.com/blog/tag/sap-translate)
- [sap_all_only_view (1)](https://www.aglea.com/blog/tag/sap_all_only_view)
- [sap_gui (1)](https://www.aglea.com/blog/tag/sap_gui)
- [sap_new (1)](https://www.aglea.com/blog/tag/sap_new)
- [scc4 (1)](https://www.aglea.com/blog/tag/scc4)
- [scoodo log (1)](https://www.aglea.com/blog/tag/scoodo-log)
- [scrambling (1)](https://www.aglea.com/blog/tag/scrambling)
- [scrum sap (1)](https://www.aglea.com/blog/tag/scrum-sap)
- [secpol (1)](https://www.aglea.com/blog/tag/secpol)
- [security bridge (1)](https://www.aglea.com/blog/tag/security-bridge)
- [security operation center (1)](https://www.aglea.com/blog/tag/security-operation-center)
- [security template (1)](https://www.aglea.com/blog/tag/security-template)
- [security tools (1)](https://www.aglea.com/blog/tag/security-tools)
- [security weaver (1)](https://www.aglea.com/blog/tag/security-weaver)
- [self service (1)](https://www.aglea.com/blog/tag/self-service)
- [semplificare (1)](https://www.aglea.com/blog/tag/semplificare)
- [sentinel (1)](https://www.aglea.com/blog/tag/sentinel)
- [sicurezza codice ABAP (1)](https://www.aglea.com/blog/tag/sicurezza-codice-abap)
- [sicurezza dati (1)](https://www.aglea.com/blog/tag/sicurezza-dati)
- [sistema integrato (1)](https://www.aglea.com/blog/tag/sistema-integrato)
- [sod ruleset (1)](https://www.aglea.com/blog/tag/sod-ruleset)
- [sondaggi (1)](https://www.aglea.com/blog/tag/sondaggi)
- [sost (1)](https://www.aglea.com/blog/tag/sost)
- [sql (1)](https://www.aglea.com/blog/tag/sql)
- [sticker (1)](https://www.aglea.com/blog/tag/sticker)
- [su21 (1)](https://www.aglea.com/blog/tag/su21)
- [system integrator (1)](https://www.aglea.com/blog/tag/system-integrator)
- [tabelle SAP grc access control (1)](https://www.aglea.com/blog/tag/tabelle-sap-grc-access-control)
- [tassi di cambio (1)](https://www.aglea.com/blog/tag/tassi-di-cambio)
- [test autorizzazioni (1)](https://www.aglea.com/blog/tag/test-autorizzazioni)
- [traduzione ruoli (1)](https://www.aglea.com/blog/tag/traduzione-ruoli)
- [traduzione sap (1)](https://www.aglea.com/blog/tag/traduzione-sap)
- [ust04 (1)](https://www.aglea.com/blog/tag/ust04)
- [utenti sap (1)](https://www.aglea.com/blog/tag/utenti-sap)
- [utenze di sistema (1)](https://www.aglea.com/blog/tag/utenze-di-sistema)
- [virtual forge (1)](https://www.aglea.com/blog/tag/virtual-forge)
- [vpn (1)](https://www.aglea.com/blog/tag/vpn)
- [xiting (1)](https://www.aglea.com/blog/tag/xiting)

[Visualizza tutti](https://www.aglea.com/blog/sviluppatori-sap.-meglio-un-team-di-sviluppo-interno-o-esterno#)

## [SAP Security Blog AGLEA RSS Feed](https://www.aglea.com/blog/rss.xml)

Aglea s.r.l. - Soggetta alla direzione e coordinamento di Horsa S.p.A. - P. IVA: IT 03868780960 - 2026 | [Privacy Policy](https://www.aglea.com/privacy-policy/) - [Cookie Policy](https://www.aglea.com/cookie-policy) - [Whistleblowing](https://whistleblowing.horsa.it/)

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Massimo Manara",
    "url" : "https://www.aglea.com/blog/author/massimo-manara"
  },
  "dateModified" : "2024-06-14T09:19:24.161Z",
  "datePublished" : "2019-09-17T22:00:00.000Z",
  "headline" : "Sviluppatori SAP. Meglio un team di sviluppo interno o esterno?",
  "image" : [ "https://www.aglea.com/hubfs/Aglea/Imported_Blog_Media/Programmazione%20sicura%20SAP-4.jpg" ],
  "mainEntityOfPage" : {
    "@id" : "https://www.aglea.com/blog/sviluppatori-sap.-meglio-un-team-di-sviluppo-interno-o-esterno",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject"
    },
    "name" : "Horsa S.p.A."
  }
}
```