---
title: Cyber Security SAP ERP
description: "What is the meaning of this term?	
What actions can be taken to protect these systems?
What are the main visible risks of inaction?

#AgleaSAPSecurity"
---

[AGLEA Blog ](https://www.aglea.com/en/blog)

# [Cyber Security SAP ERP](https://www.aglea.com/en/blog/cyber-security-sap-erp)

 Written by [Klea Duro](https://www.aglea.com/en/blog/author/klea-duro) | Jul 13, 2023 10:00:00 PM

What is the meaning of this term?

 

 

What are the actions we can take to protect an SAP system?

 

## Cyber Security

This term identifies all the actions to be put in place to protect information systems. That is, ensuring the availability, confidentiality and integrity of systems (CIA principle: Confidentiality, integrity and availability).

 

It is a term widely used today and often overused by cybersecurity companies, [read more about it here](https://www.aglea.com/blog/consulenza-sap-security-come-scegliere).

 

## What actions can be taken to protect these systems?

There are several levels of action, the main ones being the following:

 

- **Physical security**, which is all measures to physically protect data and information. For example, physical access control (turnstiles, company entry badges, locks padlocks etc), but also cameras, alarms and other physical protections precisely
- **Logical security**, that is, all those "digital" control measures. Authentication systems, passwords, single sign on, log management systems, SIEM, intrusion detection systems, antivirus etc.

 

Beyond the measures taken, whether they are physical or logical security, it becomes essential to conduct a risk assessment.

 

We should always take into consideration what data we are protecting and what degree of protection we are willing to handle.

 

Risk analysis allows us to understand all the treatments that need to be taken to protect an SAP system, based on the information it contains. Personal data or strategic business/reserved data.

 

## What are the macro areas of focus?

- **Communication security** (enabling encryption)
- **Security of stored data **(data encryption)
- **Application security** ([SAP security](https://www.aglea.com/en/sap-security-1))
- **Identity management**
- **Hardening of systems** (infrastructure/operating systems/databases)
- Correlation and logging of security events e.g. via **SIEM (security information and event management)**
- Security incident management 
- **Training**

 

 

## What are the actions to verify that the aforementioned is correctly set up?

 

Performing of of vulnerability assessments/penetration tests or periodic audits becomes strategic to understand whether areas above have been properly set up and configured.

 

## What are the main visible risks of inaction?

1. Risks of corporate fraud
2. Data theft
3. Reputational damage
4. Loss of certifications as a result of non-compliance (e.g., GxP)
5. Sanctions (e.g., noncompliance in personal data management, GDPR)
6. Corporate financial statements not approved by auditors
7. Loss of competitiveness compared to industry players

 

 

 

Topics: [auditing](https://www.aglea.com/blog/tag/auditing), [social engineering](https://www.aglea.com/blog/tag/social-engineering), [cyber security](https://www.aglea.com/blog/tag/cyber-security)

[View full post](https://www.aglea.com/en/blog/cyber-security-sap-erp)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Klea Duro"
  },
  "dateModified" : "2024-06-14T10:13:46.614Z",
  "datePublished" : "2023-07-13T22:00:00Z",
  "headline" : "Cyber Security SAP ERP",
  "image" : {
    "@type" : "ImageObject",
    "height" : 1280,
    "url" : "https://8916761.fs1.hubspotusercontent-na1.net/hubfs/8916761/Aglea/Imported_Blog_Media/SAP%20CYBER%20SECURITY-Jun-14-2024-10-12-44-2569-AM.jpg",
    "width" : 1920
  },
  "mainEntityOfPage" : "https://www.aglea.com/en/blog/cyber-security-sap-erp",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "AGLEA Blog"
  }
}
```