Allarticles.

Articles

• 03/13/2019 SAP Audit

  Setting up and auditing the kernel parameters of the SAP Security Audit Log (SAL)

  Since EHP 7, the Security Audit Log can be configured system-wide through kernel parameters. They override the profile parameters. Anyone who only checks RZ10 during an audit can get it wrong.

  Read 4 min read

• 02/26/2019 SAP Audit

  Setting up and auditing SAP security policies (SECPOL)

  Since EHP 6, password rules can be tightened per user group through security policies. Anyone who checks only the profile parameters misses them. How security policies are set up and evaluated.

  Read 3 min read

• 09/28/2018 SAP Emergency Access

  Approving SAP emergency user sessions: ex ante or ex post?

  Does every emergency user session need approval in advance, or is a mandatory review afterwards enough? Both approaches have good reasons. Why we chose the review after the session.

  Read 3 min read

• 09/17/2018 SAP Emergency Access

  SAP emergency user concepts: should you assign SAP_ALL?

  Differentiated emergency roles or simply SAP_ALL? We think the differentiation puts the control in the wrong place. What matters is that emergencies stay rare and every session is reviewed without gaps.

  Read 3 min read