How To Survive an SAP Security Audit

There are 3 core aspects to consider regarding not only surviving an SAP Security Audit, but also for the purposes of long-term system stability and maintenance.

• The State of the Union: Where are we now? How did we get here? What challenges do we face?
• Political Reform: What steps are we going to take towards stabilization? Who is going to be responsible for these items? How will this change the way we do business?
• Ongoing Legislature: What long-term policies and procedures are we going to set in place in order to maintain our clean up efforts? What risks do we still have and how are we going to monitor them? Are we going to have a timeline for periodic review of our Security?

This is the beginning of a 4 part series which will cover the core aspects listed above. Some of the key benefits in understanding SAP Security include:

• Limiting the perpetration of fraudulent behaviors or data integrity issues due to the accidental misuse of a user’s authorizations
• Minimizing segregation of duties (SOD) violations
• Decreased administrative and testing efforts to maintain security environment
• Monitoring elevated and emergency access
• Being able to proactively identify and monitor security risks
• Increased ease of scalability

Feel free to reach out to me with further questions or comments regarding this topic. Stay tuned for the rest fo the series!

Back in action,

@PostGradSAP

Tracy

• Advice
• GRC
• Security