SAP Security is a wide field. Most SAP Technology Experts think that SAP Security is all about authorizations, user management, roles, profiles and all that highly complicated stuff. But it is like with protecting a house: if you only look at who has which keys for the doors, but forget to close the windows, then your security might be pretty weak. Therefore, it is important to get "the whole picture" about SAP security.
Consequently, in this report we highlight all the relevant technical and organizational activities that you should think about when you care about the security of your SAP application landscape. All the information presented in this report is freely available, and can be collected using different sources. There are some good paper works (books, manuals, etc.) out there that can help you in making SAP bullet-proof. But as always, there is never enough money available for all potential measures, and so you need to make choices. This report tries to help in this matter, and aims to give guidance to look for effective, yet future-proof security solutions, while taking into account existing knowledge about weaknesses and threats.
