SAP CyberSecurity


What Is Cybersecurity?

Cybersecurity is the practice of protecting systems and information from digital attacks. Cybersecurity measures are designed to combat threats against networked systems and applications, whether those threats originate from inside or outside of an organization.

Businesses with a comprehensive cybersecurity strategy, governed by best practices and automated using advanced analytics, artificial intelligence, and machine learning, can fight cyber threats more effectively and reduce the impact of breaches when they occur.

What Is Cybersecurity?

Cybersecurity is the practice of protecting systems and information from digital attacks. Cybersecurity measures are designed to combat threats against networked systems and applications, whether those threats originate from inside or outside of an organization.

Businesses with a comprehensive cybersecurity strategy, governed by best practices and automated using advanced analytics, artificial intelligence, and machine learning, can fight cyber threats more effectively and reduce the impact of breaches when they occur.

What Is SAP Cybersecurity?

SAP cybersecurity solutions include:

UI Data Protection Masking and UI Data Protection Logging

  • Protect sensitive information in the user interface layer
  • Block or log data access
  • Secure and refine access

SAP Code Vulnerability Analyzer

  • Identify and remedy security vulnerabilities in ABAP custom code

SAP Focused Run

  • Security configuration management for SAP S/4HANA, SAP HANA, SAP NetWeaver, and Java 2 Platform, Enterprise Edition
  • Patch management

SAP Enterprise Threat Detection and SAP Enterprise Threat Detection Cloud Edition

  • Security information and event management solution tailored to the needs of SAP applications
  • Identify and analyze threats in SAP applications

SAP Data Custodian and SAP Data Custodian Key Management Service

  • Manage security keys
  • Monitor and report on data access, storage, movement, processing, and location
  • Create and enforce data access, location, movement, and processing policies

SAP Privacy Governance

  • Identify security and privacy risks
  • Deploy and manage maturity assessments with configurable templates
  • Manage security and privacy control evaluations and monitor ongoing compliance

Further Resources for SAPinsiders

SAP Cybersecurity in an Age of Uncertainty. In this article, Jhansi R Bandaru, PMP-Certified IT SAP Security/Compliance Lead, explains that organizations should regularly audit SAP systems to check their security and data integrity and identify vulnerabilities before attackers do. Knowing the weaknesses and gaps in a system is the first step in empowering management to deal with those vulnerabilities proactively, concisely, and effectively.

Expert Q&A: The Importance of Integrating Cybersecurity and Enterprise Risk Management. In this video interview, Gabriele Fiata, Head of Enterprise Risk Management and Innovation at SAP, shares his thoughts on enterprises’ common mistakes when managing cybersecurity risk and the need to integrate cybersecurity into an enterprise’s risk management framework.

A Holistic Approach to Managing Cybersecurity & Protecting Your Data. According to SAP Cybersecurity Solution Advisor Anne Marie Colombo, organizations should minimize user access to data by segregating and protecting it. This article presents best practices to ensure a holistic approach to cybersecurity and data protection for your enterprise.

Vendors that can assist SAP customers with cybersecurity include: Capgemini, Fastpath, Fortinet, Layer Seven Security, Lookout, Onapsis, RSM, and Saviynt.

 

105 results

  1. Using SAP UI Logging & the SAP Security Audit Log to monitor events to mitigate Cyber Security Risks

    Protecting an organization’s data has never been more challenging. The cost of a data leak goes far beyond fines – impacting both investor and consumer confidence, causing potentially catastrophic harm to brand and reputation. Proactively addressing risk through logging user interaction, coupled with masking sensitive confidential data provides much needed tracking, auditability and safeguarding. SAP…

  2. cybersecurity

    A Holistic Approach to Managing Cybersecurity & Protecting Your Data

    Published: 05/May/2021

    Reading time: 8 mins

    The COVID-19 pandemic has ushered in a new paradigm in which legacy security tools and practices have left gaping holes in corporate data protection. To plug these gaps and counter increasing threats, organizations should employ a holistic approach to cybersecurity, privacy, and data protection. Scott Margolis, Managing Director for the Data Privacy and Protection Practice…

  3. Case Study: How Orkla Made Cybersecurity an Integral Part of Its SAP S/4HANA Implementation

    Prioritizing cybersecurity is a must for businesses investing in SAP solutions. Many organizations fall short of appropriate levels of security and direct involvement of their equivalent of a Chief Information Security Officer (CISO). How can companies migrating to SAP S/4HANA make SAP cybersecurity a priority? Where do they start, and what do they protect? Orkla…

  4. Requirements for Securing Cloud-Based Systems

    Published: 14/January/2021

    Reading time: 6 mins

    As organizations accelerate the move of enterprise applications and data into cloud-based and cloud-resident systems, it’s extremely important to ensure that security is in place early to avoid having to backtrack and address these issues. Whether systems are running in Software-as-a-Service, Platform-as-a-Service, or Infrastructure-as-a-Service environments, each deployment offers unique security challenges. This track will help…

  5. The Security and Compliance Landscape for SAP Systems

    Published: 14/January/2021

    Reading time: 6 mins

    The rapid shift to remote working has made every employee their own security perimeter, something that has been already a challenge for organizations dealing with a workforce increasingly using mobile solutions. Those running SAP solutions need to enhance security to secure this more distributed work force, as well as addressing rapidly changing employee responsibilities which…

  6. How to Build a Strong Security and Compliance Foundation for Your SAP Landscape

    How to Build a Strong Security and Compliance Foundation for Your SAP Landscape

    Published: 06/November/2020

    Reading time: 19 mins

    While most successful cyberattacks are carried out on a company’s application layer, many security departments see the SAP application layer as a “black box,” and its security as the responsibility of their Basis or SAP application colleagues or of a service provider, making the security of this layer a blind spot within many organizations. Compounding…

  7. SAP Hacking – Let Google hack your SAP System 2.0

    Attend this session to learn about critical vulnerabilities in SAP systems that are often not properly addressed, as well as, the impact a bad security design has on your SAP system landscape. Gain a firm understanding of the importance proper roles and authorizations have and what you need to consider in your security design. You…

  8. How MARS, Inc. is Achieving Unrivaled Visibility into SAP Data Access & Usage

    The SAP team at MARS knows that deep visibility into application activity is no longer a “nice to have” option. With newly discovered vulnerabilities (RECON) and growing data privacy mandates (GDPR, CCPA), understanding SAP data access and usage is as critical as maintaining a secure network. In this session, join Matt Pecorelli, Director of Cyber…

  9. Reinforcing SAP Security Controls in a Landscape of Vulnerabilities

    Advanced persistent threats, bugs like RECON, and even your insiders pose a growing challenge in securing SAP. Are your existing roles and controls enough to stop these threats? Likely not. While sufficient from a governance perspective, organizations must do more to combat threats that are circumventing existing measures. In this session, learn how you can…

  10. Female IT professional

    SAP Announces It Is Addressing Cyber Security Gaps in Multiple Cloud Solutions

    Published: 05/May/2020

    Reading time: 2 mins

    On May 4, SAP announced that, while performing regular internal reviews of the company’s cybersecurity infrastructure, they discovered several of the company’s cloud products “do not meet one or several contractually agreed or statutory IT security standards.” Learn what this means for the SAPinsider Community.