{"id":8766,"date":"2023-04-05T11:58:07","date_gmt":"2023-04-05T09:58:07","guid":{"rendered":"http:\/\/inprosec.com\/?p=8766"},"modified":"2024-01-10T12:37:09","modified_gmt":"2024-01-10T10:37:09","slug":"webinar-security-controls-in-sap-systems","status":"publish","type":"post","link":"https:\/\/www.inprosec.com\/en\/webinar-security-controls-in-sap-systems\/","title":{"rendered":"Webinar \u2013 Security Controls in SAP Systems"},"content":{"rendered":"

On March 29th from Inprosec we conducted a webinar on “Security controls in SAP systems” taught by Miguel Fonte Diaz, SAP consultant. It was given from the CUVIV platform with two sessions of one hour each, one in the morning for the European public and another one in the afternoon for the Latam public.<\/p>\n

This webinar was aimed at users with notions of SAP looking to expand their knowledge and they were able to intervene at the end of the session.<\/p>\n

Below, we leave you with the contents that were taught in the webinar:<\/p>\n

Due to increased computerization and digitization of business processes<\/strong>, security in their systems is becoming increasingly important<\/strong> for organizations to prevent possible incidents affecting production, information or management of these, and has begun to prioritize the security of their systems to a greater extent.<\/p>\n

All organizations should have a minimum set of controls<\/strong> in place to ensure information security in its three key aspects<\/strong>: confidentiality, availability and integrity.<\/p>\n

SAP’s first steps towards greater security<\/h2>\n

Around 2015-2020<\/strong> is the turning point<\/strong> where different organizations begin to perceive the security of their systems as a priority.<\/strong><\/p>\n

Therefore, in 2019, SAP implements<\/strong> a series of technical configurations at the security level<\/strong> that will begin to be applied by default in all new SAP systems that are implemented from that moment on, and that will considerably increase the minimum security standards applied to the systems.<\/p>\n

All these configurations had already been available<\/strong> for years in SAP systems, but each customer had to configure them manually to these higher security levels.<\/strong><\/p>\n

SAP Security Baseline<\/h3>\n

After this first measure taken by SAP, some time later SAP decided to publish what was to be called the SAP Security Baseline.<\/strong><\/p>\n

This document is basically a series of security controls that SAP defines as minimum to monitor and ensure the security of their systems, and are detailed in the following note published by SAP: 2253549<\/a>.<\/p>\n

These recommendations can be downloaded and implemented for monitoring in some of the system monitoring tools offered by SAP.<\/p>\n

This is where we at Inprosec<\/strong> try to support our customers, offering a security configuration that, although based on the Security Baseline, offers other benefits for security control:<\/p>\n