mopdf.com

SAP EarlyWatch Alert WorkspaceSAP Product Excellence Award 2018 – voted by SUGEN customers EarlyWatch Alert workspace One data lake with 2 years history of system data Designed for Predictive and Preventive service Basis for Continuous Quality Checks Build for Simplicity with Design Thinking Build on SAP Cloud Platform & SAP HANAShows critical Security issues across prod landscape(Pre-requisite: S-User Authorization Display Security Alerts in SAP EarlyWatch AlertWorkspace) Prioritized Worklist – share and track progress. Get Clean! 76.40063,000 17,000 1 millionVisits in August 2019Customer systemsSystems based on SAP HANASAP HANA objects analyzedevery week to predicted2 billion record limit 2022 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC19

SAP EarlyWatchDisplay Security Alerts in SAP EarlyWatch Alert WorkspaceHow many systems are vulnerable (“YELLOW” or “RED”) 2022 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLICStandard Users including DDIC or SAP* have default passwordsHANA user SYSTEM is active and valid (6 Systems)RFC Gateway and Message Server Security – Doors wide open (3 Systems)HANA Internal or System Replication Communication is not secured Weak Password Policy (ABAP, HANA)HANA: SQL Trace configured to display actual data Systems having an old SPS (no longer supported with new SAP Security Notes) (15 Systems) Users having critical basis authorizations like SAP ALL, Debug, Display/Change all tables, HANA users having critical authorizations like DATA ADMIN privilege Audit Log is not active or written to an unsecure audit trail target20

Cybersecurity- and Compliance Solutions from SAP based on NISTIdentifyDetectProtectArchitecture & Planning servicesEmpowerment ServicesSAP EarlyWatch AlertRespondExecution & Implementation Services Continuous Improvement ServicesSAP Enterprise Threat DetectionRecoverSecurity expertsManaged Service via ETDUI data protection masking & loggingSAP Configuration ValidationBusiness Integrity ScreeningSAP System RecommendationsSAP Focused RunABAP test cockpit & SAP Code Vulnerability AnalyzerSAP Fortify by Micro FocusSingle Sign-OnUser & Identity ManagementSAP Standard ToolCybersecurity SolutionAccess ManagementCompliance SolutionSAP Data CustodianService & Support 2022 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC21

SAP Focused RunThe ultimate solution for OperationsAddresses advanced customer needs inscalability, data volumes, security, automation,openness, dashboarding & artificial intelligence Manage landscapes with thousands of systems with minimaloperations costs Monitor real as well as synthetic user requests across systemsand technology Manage complex landscapes with millions of interface callsand/or message flows Efficiently operate thousands of system, user, and integrationalerts, including integrated IT infrastructure events Enable central governance of software levels and configurationsettings Deep detailed root cause analysis capabilities tailored to yourneeds Use SAP’s out-of-the-box Analytics & Intelligence capabilities 2022 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC22

Focused Run – Security and Compliance Key FeaturesAdvancedEvent & ncedRoot CauseAnalysis(ARA)AdvancedAnalytics &Intelligence(AAI) Pre defined & policy based security & compliance validation of configurations Monitoring of server side certificates Security note deployment validation / transparency about gaps vs. achievement Integration into operational processes Insights into actual usage / system communication & document flow & user behaviour Great graphical charts and build in dashboarding incl. Management overviewTechnology Foundation: SAP HANA / SAP NetWeaver ABAP SAPUI5 2022 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC23

Cybersecurity- and Compliance Solutions from SAP based on NISTIdentifyDetectProtectArchitecture & Planning servicesEmpowerment ServicesSAP EarlyWatch AlertRespondExecution & Implementation Services Continuous Improvement ServicesSAP Enterprise Threat DetectionRecoverSecurity expertsManaged Service via ETDUI data protection masking & loggingSAP Configuration ValidationBusiness Integrity ScreeningSAP System RecommendationsSAP Focused RunABAP test cockpit & SAP Code Vulnerability AnalyzerSAP Fortify by Micro FocusSingle Sign-OnUser & Identity ManagementSAP Standard ToolCybersecurity SolutionAccess ManagementCompliance SolutionSAP Data CustodianService & Support 2022 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC24

SAP NetWeaver Application Server, add-on for code vulnerability analysisDevelop highly secure SAP ABAP applicationsIdentify and remedy securityvulnerabilities in ABAP custom code Tighten application security by scanningcustom ABAP code Protect against malicious code attacksand data breaches Rely on a solution that has beenrigorously tested on a massive scale 2022 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC25

Cybersecurity- and Compliance Solutions from SAP based on NISTIdentifyDetectProtectArchitecture & Planning servicesEmpowerment ServicesSAP EarlyWatch AlertRespondExecution & Implementation Services Continuous Improvement ServicesSAP Enterprise Threat DetectionRecoverSecurity expertsManaged Service via ETDUI data protection masking & loggingSAP Configuration ValidationBusiness Integrity ScreeningSAP System RecommendationsSAP Focused RunABAP test cockpit & SAP Code Vulnerability AnalyzerSAP Fortify by Micro FocusSingle Sign-OnUser & Identity ManagementSAP Standard ToolCybersecurity SolutionAccess ManagementCompliance SolutionSAP Data CustodianService & Support 2022 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC26

UI Data Security: two step approach to protect data from insidersUI MaskingUI Loggingconceal specific data –unless required for taskskeep data accessible – and create abroad deep log of data access make sensitive dataunavailable for data abuse induce compliant behavior identify & prove irregular data usage Baseline for decision on actions“Lock it” 2022 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC ”or log it!27

Cybersecurity- and Compliance Solutions from SAP based on NISTIdentifyDetectProtectArchitecture & Planning servicesEmpowerment ServicesSAP EarlyWatch AlertRespondExecution & Implementation Services Continuous Improvement ServicesSAP Enterprise Threat DetectionRecoverSecurity expertsManaged Service via ETDUI data protection masking & loggingSAP Configuration ValidationBusiness Integrity ScreeningSAP System RecommendationsSAP Focused RunABAP test cockpit & SAP Code Vulnerability AnalyzerSAP Fortify by Micro FocusSingle Sign-OnUser & Identity ManagementSAP Standard ToolCybersecurity SolutionAccess ManagementCompliance SolutionSAP Data CustodianService & Support 2022 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC28

Challenges In the Multi-Cloud EraData is EverywhereIaaS PaaS SaaSMulti-CloudPublic cloud deploymentsare on the riseNew GovernanceStandardsCompliance SecurityLocalization AuditsRegulatory compliancedriving data protectionNew DemandsAccess ControlGeo-Location EncryptionShared Responsibility 2022 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC29

SAP Data CustodianMulti-Cloud Data Insight and ProtectionThe SAP Data Custodian solution is a Multi-Cloud SaaSapplication designed to achieve the following businessobjectives:Multi-Cloud and multi-application data insight and protection(Azure, AWS, GCP, AliCloud, S/4H, ECC)Data governance, compliance and audit reportingRapid identification and notification of data protectionbreaches 2022 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC30

Cybersecurity- and Compliance Solutions from SAP based on NISTIdentifyDetectProtectArchitecture & Planning servicesEmpowerment ServicesRespondExecution & Implementation Services Continuous Improvement ServicesSAP Enterprise Threat Detection & Cloud EditionSAP EarlyWatch AlertRecoverSecurity expertsManaged Service via ETDUI data protection masking & loggingSAP Configuration ValidationBusiness Integrity ScreeningSAP System RecommendationsSAP Focused RunABAP test cockpit & SAP Code Vulnerability AnalyzerSAP Fortify by Micro FocusSingle Sign-OnUser & Identity ManagementSAP Standard ToolCybersecurity SolutionAccess ManagementCompliance SolutionSAP Data CustodianService & Support 2022 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC31

SAP Enterprise Threat Detection & Cloud EditionStop security breaches in today’s SAP S/4HANA business applications.Enterprise Threat Detection gives transparency in to suspicious (user) behavior and anomalies in SAPbusiness applications to identify and stop security breaches in real-time.Enterprise Threat Detection uses highly efficient and automated processes based on HANA technology andMachine learning to track hacker activity using SAP's predefined and easy customizable attack paths. Increasing number of hacker attacks Regulatory requirements for security andcompliance controls.Stop security breaches in today’s SAP S/4HANAbusiness applications. SAP system Transparency with respect toSecurity- and Compliance-Events. Roles and Authorizations only will not protect anSAP S/4HANA environment.Perimeter and IT infrastructure security is notsufficient to protect the SAP S/4HANA businesscore.Analyzing the huge amount of events coming fromthe SAP S/4HANA Business Applications. 2022 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLICBenefitsSolutionChallenge Correlate the complete picture of an hackerattack, not only a few small puzzle peace’s.Perform forensic investigations, search for threatsand detect anomalies in SAP S/4HANAapplications.All audit logs available in a central instance(manipulation save, unfiltered, normalized,readable). Detect threats in your SAP S/4HANA applicationsto avoid financial loss, legal and reputationaldamage. Safeguard the operation of your SAP S/4HANA. Reduce effort for conducting audits. Gain transparency and simplify the analysis ofsuspicious activities, Identify security gaps, and understand theimpact on your business. Analyze huge amounts of information quickly andto take the right decision in time.32

Cybersecurity- and Compliance Solutions from SAP based on e & Planning services Empowerment Services Execution & Implementation Services Continuous Improvement Services Security expertsSAP EarlyWatch AlertSAP Enterprise Threat DetectionManaged Service via ETDUI data protection masking & loggingSAP Configuration ValidationBusiness Integrity ScreeningSAP System RecommendationsSAP Focused RunABAP test cockpit & SAP Code Vulnerability AnalyzerSAP Fortify by Micro FocusSingle Sign-OnUser & Identity ManagementSAP Standard ToolCybersecurity SolutionAccess ManagementCompliance SolutionSAP Data CustodianService & Support 2022 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC33

SAP Cyber Security MaxAttention Services 2022 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC34

Key takeaways1.SAP systems or applications can be affected by hacker attacks2.SAP can provides a structured approach to customers and partners covering the SAP relateddisciplines3.SAP provides solutions and services to support organizations protection their SAP environment4.Useful tfolio.html 2022 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC35

Thank you.Contact information:Arndt LingscheidSolution owner GRC & Cyber SecurityE-Mail: [email protected]: 49 160 90 84 11 88SAP SE Dietmar-Hopp-Allee 16, 69190 Walldorf, Germany

Follow uswww.sap.com/contactsap 2022 SAP SE or an SAP affiliate company. All rights reserved.No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission ofSAP SE or an SAP affiliate company.The information contained herein may be changed without prior notice. Some software products marketed by SAP SE and itsdistributors contain proprietary software components of other software vendors. National product specifications may vary.These materials are provided by SAP SE or an SAP affiliate company for informational purposes only, without representation orwarranty of any kind, and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials.The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warrantystatements accompanying such products and services, if any. Nothing herein should be construed as constituting an additionalwarranty.In particular, SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document orany related presentation, or to develop or release any functionality mentioned therein. This document, or any related presentation,and SAP SE’s or its affiliated companies’ strategy and possible future developments, products, and/or platforms, directions, andfunctionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reasonwithout notice. The information in this document is not a commitment, promise, or legal obligation to deliver any material, code, orfunctionality. All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differmaterially from expectations. Readers are cautioned not to place undue reliance on these forward-looking statements, and theyshould not be relied upon in making purchasing decisions.SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registeredtrademarks of SAP SE (or an SAP affiliate company) in Germany and other countries. All other product and service namesmentioned are the trademarks of their respective companies.See www.sap.com/copyright for additional trademark information and notices.

Cyber security and data protection On Prem SAP S/4HANA SAP S/4HANA PCE (Private Cloud Edition) SAP Ariba SAP Sustainability SAP SuccessFactors SAP Fieldglass Public Cloud SAP Concur SAP IBP SAP Business Technology Platform SAP Data Custodian UI Masking and logging Protect sensitive information in the user interface layer Block or log data .