How many times have we heard in the company when creating a new user, "give me a colleague as a reference," that is, in the process of defining a new user, we reason more by copy than by corporate trade.
But is this approach correct? Or does it present some possible problems?
Profiling also exists and can be implemented in the SAP HANA database.
But not all roads lead to the same result. Some choices may not be ideal in the long run and in the management of authorizations in SAP HANA. What is important to know when defining SAP HANA roles?
This is not always done as this database is mainly used when using SAP applications. Such as S/4HANA.
Topics like Least Privileged Access, True Compliance and Accountability are commonplace when it comes to SAP Security.
However, an additional layer of protection, that of biometrics, can be added to the existing set of standard security tools provided by SAP.
Topics: governance, sap cyber security, Threat detection, biometric
Do you use a password to login to SAP systems?
Which are the most obvious cases which you should pay attention to?
Topics: sap password, sap logon
SOAR is the acronym for Security Orchestration, Automation, and Response.
Why is it important to know what it is and how is it used? The definition of a SOAR SAP Security system is strategic.
Topics: soar, sap siem, sap etd, sap splunk
Have you ever heard of this kind of organization?
What is it? How does it work? How is SAP Security managed in this kind of organizations?
Topics: sap security teal
What is it? How should you structure it in our opinion?
How should you prepare to activate and evaluate it?
Topics: security ams, supporto sap ams
SAP provides pre-defined roles instead of having to create them from scratch.
Is it worth using them or not? Why are they often, or almost always, not used?
Topics: pfcg, sap standard role
This is a statement that I often hear: "SAP traces everything".
But is it actually like that? Can I really ensure an activity tracing and find out who did what in the system? Or are there any methods to bypass these logs?
What is a SAP Security Patch Day? When should you do it?
Who are the main researchers reporting security problems to SAP?
Topics: patch, sap vulnerability, sap patch