Topic
SAP Audit
Authorizations, system settings and journal entry testing: auditing the whole system instead of a sample.
Articles
-
Setting up and auditing the kernel parameters of the SAP Security Audit Log (SAL)
Since EHP 7, the Security Audit Log can be configured system-wide through kernel parameters. They override the profile parameters. Anyone who only checks RZ10 during an audit can get it wrong.
-
Setting up and auditing SAP security policies (SECPOL)
Since EHP 6, password rules can be tightened per user group through security policies. Anyone who checks only the profile parameters misses them. How security policies are set up and evaluated.
Next step
Audit the whole SAP system instead of a sample. ISPICIO_X fetches the tables, free of charge.