Andrea Mazzolani

Andrea Mazzolani

Recent Posts

BioLock for SAP: what is it?

Posted by Andrea Mazzolani on Apr 28, 2023 8:15:00 AM

Topics like Least Privileged Access, True Compliance and Accountability are commonplace when it comes to SAP Security.

 

 

However, an additional layer of protection, that of biometrics, can be added to the existing set of standard security tools provided by SAP.

 

Read More

Topics: governance, sap cyber security, Threat detection, biometric

SAP User Management: password, 5 points for reflection

Posted by Andrea Mazzolani on Apr 21, 2023 8:15:00 AM

Do you use a password to login to SAP systems?

Which are the most obvious cases which you should pay attention to?

Read More

Topics: sap password, sap logon

SOAR, what does it mean? Why is it important?

Posted by Andrea Mazzolani on Apr 14, 2023 8:15:00 AM

SOAR is the acronym for Security Orchestration, Automation, and Response.

 

Why is it important to know what it is and how is it used? The definition of a SOAR SAP Security system is strategic.

 

Read More

Topics: soar, sap siem, sap etd, sap splunk

Teal Organization and SAP Security, what does it mean?

Posted by Andrea Mazzolani on Apr 7, 2023 8:15:00 AM

Have you ever heard of this kind of organization?

 

What is it? How does it work? How is SAP Security managed in this kind of organizations?

Read More

Topics: sap security teal

SAP AMS Support, How to Choose?

Posted by Andrea Mazzolani on Mar 31, 2023 8:15:00 AM

What is it? How should you structure it in our opinion?

 

 

How should you prepare to activate and evaluate it?

Read More

Topics: security ams, supporto sap ams

Standard SAP Roles, are they used or it's better not to use them?

Posted by Andrea Mazzolani on Mar 24, 2023 8:15:00 AM

 

SAP provides pre-defined roles instead of having to create them from scratch.

 

 

Is it worth using them or not? Why are they often, or almost always, not used?

Read More

Topics: pfcg, sap standard role

Does SAP trace everything?

Posted by Andrea Mazzolani on Mar 17, 2023 8:15:00 AM

This is a statement that I often hear: "SAP traces everything". 

 

 

But is it actually like that? Can I really ensure an activity tracing and find out who did what in the system? Or are there any methods to bypass these logs?

Read More

Topics: audit sap, log sap

SAP Security Patch Day

Posted by Andrea Mazzolani on Mar 10, 2023 8:15:00 AM

What is a SAP Security Patch Day? When should you do it?

 

Who are the main researchers reporting security problems to SAP?

Read More

Topics: patch, sap vulnerability, sap patch

10 things NOT to do if you have SAP GRC

Posted by Andrea Mazzolani on Mar 3, 2023 8:15:00 AM

 

What are the main oversights when using SAP GRC or deciding whether to use it or not?

 

 

Read More

Topics: SAP GRC, SAP Fraud Management

5 suggestions on SAP S/4HANA Security: S/4HANA Upgrade

Posted by Andrea Mazzolani on Feb 24, 2023 8:15:00 AM

What are the focus points in SAP S/4HANA projects?

 

What is worth doing to prepare? How to approach new things?

Read More

Topics: upgrade, S/4HANA Security, UCON, crittografia SAP, S/4HANA migration

Yes Subscribe!

Blog Aglea, what you could find out?

Every Friday a new post, interview or content related to SAP Security.

  • Tips on how to design SAP Security
  • How to
  • Checklist
  • Common error and pitfall on security SAP
  • Interview with experts
  • Who we are and Aglea vision on SAP Security

Recent Posts

Post By Topic

See all