There are many companies that provide SAP consulting. Each of these, in most cases, also provides support in the SAP security area.
This is absolutely normal. But what is the degree of expertise on these issues?
What most frequently happens in these cases:
Profiling users was (and to some extent still is) considered a task for technicians (systems engineers). Before involving technicians, however, an organizational analysis must be done by involving all the key players in the company in order to determine "who does what." Even today this key part is often left completely to the systems engineers.
The figure of the SAP security manager (or SAP Security consultants) today must have several skills:
Profiling is only the technological aspect of the problem. Before understanding how a user should be profiled, it is necessary to integrate the viewpoint of the HR department, the viewpoint of the business contacts and the business process managers. Most frequently, profiling and SAP security more generally are approached solely as a technical aspect.
Even more nowadays in case we have to deal with issues of segregation of duties (Segregation Of Duties) or protection of personal data (GDPR).
There are several elements that can compose a comprehensive SAP security management.
For example:
For several factors, first and foremost the experience. We have "launched" many tens of thousands of users by creating their profiles.
Second, having focused everything on one niche topic makes us particularly credible. Very often the "big" system integrators are amazed when they see that major Italian companies have chosen us and not them to handle this 'topic. This seems like an anomaly.
When you have to have very delicate knee surgery, you try to go to a hyper-specialized doctor.
We are the only Italian company that has been dealing, as its only core business, with security in the SAP environment, since 2003. Finally, we have done a lot of work on tools.
We use a special software (Security Analyzer SA) that allows us to revolutionize the approach and timing of projects.
P.S.: Are your suppliers certified? Read about our certifications here.
Topics: sicurezza sap, consulenza sap security, sicurezza dei dati sap, progetti sap security, aglea, sap consulenza security