AGLEA Blog

Here's why it's important to check how data is exported and by who it's spread

How do you monitor the data exported from SAP ECC?

Many users must be formally authorized in order to do that as part of their job. It’s however of great importance, especially in a GDPR framework, to monitor how and who exports data in a non-authorized way from the SAP system.

How do you do that? Let’s see some paid methods and others included in the SAP business suite

Are you an auditor? Or an IT manager who wants to monitor the data of his own SAP systems? 

Is it possible to assign privileges without leaving traces or almost?

That’s why you need to know what are the potential risks in the SAP system and how you can mitigate them!

In SAP there is/was a limit on the number of profiles that can be assigned to a user. Historically this limit of 300 and then 312 has been kept to stop the assignment of too many authorizations to users.

Does this limit persist?

A classic SAP landscape is made of three distinct machines:

• Develop environment
• Test or quality environment
• Production environment

It's possible to define more environments, for example, pre-production or other clients in the aforementioned systems.

Why are test systems essential for SAP security, and why do they need to be managed in such a way?

Do you have to choose or change the help desk or ticket management system? 

Here are the focus points to consider, based on our experience.

What is it for?

This tool allows you to trace the activities of one or more SAP users at application level. Can also be used to connect SAP to a third SIEM (Security Information and Event Management) or the solution SAP Enterprise Threat Detection (ETD).

Which SAP Security transactions should you have in your favorites?

Transactions for managing SAP Roles, for Profile generator configuration, for SAP auditing. Some of them are useful in certain moments, some of them daily. Also keep in mind in some cases is suggested to be used though a firefighter or your emergency users.

Have you installed one of SAP GRC Systems? Here you are 10 helpful tips on how to improve the usage of the SAP Governance suite.

Different systems are covered by the SAP GRC area (Governance, Risk and Compliance). The main ones are:  

• SAP GRC Access Control
• SAP GRC Process Control
• SAP GRC Risk Management
• SAP Global Trade Services (GTS)
• SAP Environment, Health and Safety (EHS)
• SAP Cloud Identity Access Governance

10 focus points that you might want to apply! 

We're talking about a program, available on many platforms (Windows or Unix like), that allows one to connect to SAP systems in an interactive way. The acronym SAP GUI stands for Graphical User Interface

If we want to be more precise it is the client that makes it possible to connect to SAP systems based on the ABAP technology. How do you make the most of the SAP GUI History function?

Are you oriented to buy SAP Governance Risk and Compliance Access Control? You could also interest to suggestions for the purchase, configuration and the management of this tool