SAP Security Check
SAP SE offers various training courses and certifications for SAP Basis administrators and SAP Basis consultants. As an alternative to internal recruitment and training, companies can also turn to external consultants or even outsource the entire SAP Basis administration to an external team with experience in SAP Basis.
The implementation of a cross-sectional function will promote and safeguard the operation of the SAP systems that form the backbone of the company. By coordinating the SAP basis with other IT departments, the optimisation is always done in the overall context of the company or the IT organisation. Eliminating the separation of SAP and non-SAP topics in areas where it is considered useful will lead to expert groups and synergy effects through centralisation.
Very good knowledge in the area of security relevant topics of IT system operation
This makes the technical user the dialogue user and a login in the SAP system is unrestricted. So Johannes logs in with the known password of the RFC user in the production system. Thanks to very extensive permissions, it now has access to all sorts of critical tables, transactions, and programmes in production. With the identity of the RFC user Johannes starts with the technical compromise of the production system... RFC Security: All invented - or everyday threat? Whether a simple trim, altered biometric properties or an encapsulated technical user in the SAP system: the basis of the compromise is the same. A person uses a different identity to gain access and permissions to protected areas. Moreover, the evil in all three stories could have been prevented by pro-activity. When was the last time you thought about the security of your RFC interfaces? Can you say with certainty that all your technical RFC users only have the permissions they actually need? And do you know who exactly knows the passwords of these users? Can you 100% rule out that not now in this moment an SAP user with a false identity infiltrates your production systems? Change now: It's about pro activity! But before you start now and start looking for the "identity converter" (which I really do not recommend!), I suggest that you take root of evil and proactively strengthen your RFC security. So if you want to find out more, I have the following 3 tips for you: 1) Our e-book about SAP RFC interfaces 2) Clean up our free webinar about RFC interfaces 3) Blog post about our approach to optimising RFC interfaces As always, I look forward to your feedback and comments directly below these lines!
Soft skills in particular also play an important role in this job description. Communication skills are very much in demand on a day-to-day basis, because SAP administrators are often in close contact with customers and have to respond to their wishes and questions. They also need the ability to work in a structured manner and to find creative solutions and decisions. Continuous training in the field is advisable in order not to lose touch.
"Shortcut for SAP Systems" is a PC application that simplifies or even facilitates many activities in the SAP base.
An administrator's previously acquired SAP ERP and Basis skills are still valuable, but they must learn a new database in addition to the new module (such as S/4HANA or BW/4HANA).
Read more This blog post is intended to show what is already possible in the field of Security Automation.