64% of ERP Systems Have Experienced Security Breaches Between 2017-19
According to an independent survey of 430 IT decision makers, 64 percent of ERP deployments have experienced security breaches in the past 24 months. The findings are published in the report ERP Security: The Reality of Business Application Protection. Most of the breaches compromised sensitive data, including sales, HR, customer, financial and intellectual property data. […]
Securing Administrative Access in SAP AS Java
Administrative access in SAP NetWeaver Application Server for Java (AS Java) is secured by granting UME administrative roles and actions, such as Manage_All, Manage_Roles and Manage_Users, only to users who need them (least privilege), and by monitoring privileged users and new privilege grants with the Cybersecurity Extension for SAP Solution Manager. Executive Summary Misuse of […]
Webinar Recording: Security Analytics with SAP Web Intelligence
This webinar replay shows how SAP Web Intelligence, running on the BusinessObjects platform, turns SAP Solution Manager data into interactive security reports. It covers vulnerabilities, missing security notes and open alerts, with charts, tables, comments for tracking remediation, and remote access. Executive Summary Web Intelligence connects directly to data sources in SAP Solution Manager and […]
Secure, Patch & Respond: Security Analytics with SAP Web Intelligence
SAP Web Intelligence lets users visualize and manage security risks in SAP systems through interactive web reports. Powered by the BusinessObjects platform, it connects directly to SAP Solution Manager data to show vulnerabilities, missing security notes and open alerts using dynamic charts, graphs and detailed tables. Executive Summary SAP Web Intelligence reports summarize SAP security […]
Coming Soon: Security Reporting with SAP Web Intelligence
SAP Web Intelligence (WebI) is a self-service reporting platform for analyzing and visualizing SAP data in a web browser. It uses BEx queries to reach security data in Business Warehouse within Solution Manager, so teams can build dynamic reports with embedded dashboards to monitor risks and track remediation. Executive Summary Layer Seven is preparing security […]
How to Comply with the DHS Recommendations for Securing SAP Systems from Cyber Attacks
SAP Solution Manager helps you comply with the DHS recommendations for securing SAP systems by covering all seven: vulnerability scanning, interface analysis, privileged-user review, indicator-of-compromise monitoring, user-behaviour monitoring, threat intelligence updates and baseline compliance monitoring, using Configuration Validation, System Recommendations, ICMon and the Monitoring and Alerting Infrastructure. Executive Summary In response to a rise in […]
Explore Service Level Reporting in SolMan 7.2
Service Level Reporting (SLR) in SAP Solution Manager performs regular checks against key performance indicators using information available from the EarlyWatch Alert (EWA), Business Warehouse (BW) and the Computer Center Management System (CCMS). The checks can be for single systems or systems grouped into solutions. Reports run automatically on a weekly or monthly schedule but […]
How to Secure SAP Systems from Password Attacks
Exploiting weak password hashes is one of the most common and successful attack scenarios used against SAP systems. The availability of open-source programs such as Hashcat and John the Ripper enables even novice hackers to perform attacks against SAP passwords. In fact, Hashcat is capable of breaking any SAP password encoded using the BCODE hash […]
Organisations are not effectively addressing IT security and compliance risks according to accounting professionals
The results of the 2013 Top Technology Initiatives Survey revealed that securing IT environments against cyber attack and managing IT risks and compliance are rated as two of the three greatest challenges in technology by accounting professionals in North America. The survey was performed jointly by the AICPA and CPA, the largest accounting organisations in […]
A Dangerous Flaw in the SAP User Information System (SUIM)
Customers that have yet to implement Security Note 1844202 released by SAP on June 10 should do so immediately. The Note deals with a vulnerability that could be exploited to bypass monitoring controls designed to detect users with privileged access, including the SAP_ALL profile. This profile can be used to provide users with almost all […]