SAP Data Security


What Is Data Security?

Data security is the practice of protecting data from unauthorized access, corruption, or theft throughout its lifecycle. Data security includes every aspect of information security, from the physical security of hardware and storage devices to administrative and access controls and application security. It also includes putting in place specific controls, standard policies, and procedures to protect data from a range of threats.

What Is SAP Data Security?

SAP security for the intelligence enterprise falls into four categories: identity and access governance, data protection and privacy, cybersecurity, and enterprise risk and compliance. In the data protection and privacy area, SAP has implemented a wide range of measures to help protect data controlled by SAP and its customers. These measures include:

What Is Data Security?

Data security is the practice of protecting data from unauthorized access, corruption, or theft throughout its lifecycle. Data security includes every aspect of information security, from the physical security of hardware and storage devices to administrative and access controls and application security. It also includes putting in place specific controls, standard policies, and procedures to protect data from a range of threats.

What Is SAP Data Security?

SAP security for the intelligence enterprise falls into four categories: identity and access governance, data protection and privacy, cybersecurity, and enterprise risk and compliance. In the data protection and privacy area, SAP has implemented a wide range of measures to help protect data controlled by SAP and its customers. These measures include:

  • Data Processing Agreements: SAP signs data processing agreements with its cloud services provider, which mirror the terms of SAP’s customer-facing data protection agreement and include standard contractual clauses (SCCs). SAP implements and maintains technical and organizational measures to adequately protect personal data.
  • Data Transfer Impact Assessments: SAP publishes FAQs to support customers with questions related to data transfer impact assessments when they are using SAP Cloud services.
  • Data Protection Management System: The SAP data protection management system uses SAP’s data protection controls framework for all internal data protection and privacy controls, which cover the requirements of international industry standards.
  • Internal Data Protection: SAP regularly trains employees and ensures data protection compliance with regular audits on the business and legal entity levels.

Further Resources for SAPinsiders

10 Best Practices for Enforcing Data Security, Control, and Consistency in the Software Logistics Process. In this article, security architect Kehinde Eseyin provides best practices, tips, and guidelines for ensuring that the process of making changes and transporting changed data in the SAP ABAP system is well secured against possible security threats and risks.

A Holistic Approach to Managing Cybersecurity & Protecting Your Data. This article provides tips and best practices to secure your data in the intelligent enterprise. SAP offers nearly a dozen solutions employed by many organizations — including SAP itself — to respond to compliance and security requirements and, in the event of a breach, minimize the impact, relates Bruce Romney, Senior Director of Product Marketing for SAP Governance, Risk and Compliance (GRC) and Security Solutions.

Overview of SAP Cybersecurity and Data Protection Solutions. In this presentation, Arndt Lingscheid, Global Solution Owner Cybersecurity and Data Protection at SAP SE, details steps organizations can take to secure the SAP S/4HANA business application environment.

Vendors that can assist SAP customers with data security include: Appsian Security, Capgemini, Fastpath, HPE, Intel, Kyriba, Layer Seven Security, NetApp, Onapsis, Rackspace, Saviynt, Security Weaver, Thales, Virtustream, Xiting, and Xpandion.

 

23 results

  1. Data Security Analyst Insight

    Impact of European Cloud Data Security Restrictions

    Reading time: 3 mins

    European Union (EU) cybersecurity authorities are in the process of drafting a new certification system for cloud services that specifies that high-risk data can only be stored in the EU and can only be accessed by employees that are located in an EU country. And, according to a recent Wall Street Journal article on the…
  2. Security

    Security For Your SAP Future

    Reading time: 7 mins

    The number one factor impacting decisions around security for SAP systems is the need to protect access to the sensitive and confidential data in those systems. Attacks are becoming more common, particularly for organizations located in APJ,  and some of the challenges that were identified by respondents to recent SAPinsider research were detecting those threats…...…
  3. Jabil UI Masking Image

    Jabil Turns to UI Masking for Stronger Data Protection

    The proliferation of data privacy regulations and laws has prompted organizations to beef up their data privacy and protection. One way to protect data without the inconvenience of encryption is data masking or user interface (UI) masking. One company taking full advantage of SAP’s UI masking feature is Jabil, a St. Petersburg, Fla.-based global manufacturing…
  4. Wilder Latino image

    Jabil Deploys UI Masking

    Reading time: 4 mins

    The proliferation of data privacy regulations and laws, such as the European Union’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), has prompted organizations to beef up their data privacy and protection. One way to protect data without the inconvenience of encryption is data masking or user interface (UI) masking. One…
  5. How to prioritize security measures to avoid an SAP data breach

    With the increasing number of Cyberattacks in different forms, organizations need to avoid the high cost and significant business impact of a potential SAP data breach. Traditional network security does not provide adequate protection of the data in your SAP systems against insider and outsider attacks. In this session, John Mortimer, Security Consultant at CyberSafe,…
  6. How to prioritize security measures to avoid an SAP data breach

    With the increasing number of Cyberattacks in different forms, organizations need to avoid the high cost and significant business impact of a potential SAP data breach. Traditional network security does not provide adequate protection of the data in your SAP systems against insider and outsider attacks. In this session, John Mortimer, Security Consultant at CyberSafe,…
  7. Overview of SAP cybersecurity and data protection solutions

    Cyber-attacks can have severe consequences when it comes to SAP S/4HANA applications. These attacks focus on the company’s application layer and use privileged user accounts. Unfortunately, many security departments see the SAP application layer as a “black box,” and assume the security of SAP applications as the responsibility of their Basis or SAP application colleagues,…
  8. Integrated UI Data Protection: Take protection of your crown jewel data assets to the next level

    The SAP solutions for UI data protection are evolving. Join this session for the debut introduction to the first integrated release of UI Masking and UI Logging. Attend this session to: - Experience a comprehensive demo of many new features, such as data blocking and ‘Reveal on Demand’ with attribute-based authorizations - Know how these…
  9. Cybersecurity and Data Protection: Taking an Integrated Approach

    Reading time: 2 mins

    By Fred Donovan, Senior Editor, SAPinsider “The threat actor only needs to be right once. We need to be right every time,” says Scott Margolis, Managing Director for the Data Privacy and Protection Practice at Ernst & Young (EY).   The best way to stay ahead of threat actors, considering the global shift to remote work, is to implement an “integrated approach” to…
  10. How to Get the Most out of Using the Security Audit Log — From configuration to monitoring

    The Security Audit Log in SAP records security-related system information such as unsuccessful logon attempts, changes to user master records, and RFC calls. The Security Audit Log keeps a record of these activities for your review and investigation. Attend this session to gain a comprehensive overview of what the Security Audit Log is, how to…