SAP security guide

Also, don't forget to send us an e-mail to let us know what other resource guides you'd like to see on SearchSAP.com.

Best regards,
The editors of SearchSAP.com and SearchSecurity.com

TABLE OF CONTENTS    Introduction to SAP Security    Identity and Access Management    Data Protection    Platform/Operating System Security    Vulnerability Management    Disaster Recovery    Consultant's Corner    More Learning Guides

Introduction to SAP Security

Return to Table of Contents

• Article: Security needs bring redundant systems back in style (SearchSecurity.com)
• Article: Open source tools: A thrifty security manager's best friend (SearchSecurity.com)
• Advice: SAP Security vs. others (SearchSAP.com)
• Advice: Best security practices for large SAP installations (SearchSAP.com)
• Advice: Common SAP security practices (SearchSAP.com)
• Advice: Security concerns when upgrading from v.3.1 to v.4.6x (SearchSAP.com)
• Tip: Establishing security parameters (SearchSAP.com)
• Tip: Judicious use of tips (SearchSAP.com)

Identity and Access Management

Return to Table of Contents

• Article: Tackling identity theft (SearchSecurity.com)
• Advice: Secure social security reports (SearchSAP.com)
• Advice: Internal interface development vs. third-party middleware (SearchSAP.com)
• Tip: Synchronizing SAP with an external user registry (SearchSAP.com)
• Tip: It's not what you know; it's who you... are: The identity management challenge (SearchSecurity.com)
• Chapter Download: Identity and Access Management: Provisioning (SearchSecurity.com)

• Article: The latest play on passwords (SearchSecurity.com)
• Article: Sun converts Web SSO authentication to open source (SearchSecurity.com)
• Article: Is single sign-on ready for prime time? (SearchSecurity.com)
• Tip: Authentication and access (SearchSecurity.com)
• Tip: Prevent password change (SearchSAP.com)
• Tip: Passwords -- Updating, selecting and recording user and administrative passwords (SearchSecurity.com)
• Tip: Password policy worst practices (SearchSecurity.com)
• Tip: Parameters for establishing SAP password policies (SearchSAP.com)
• Tip: How to avoid authentication bypass attacks (SearchSecurity.com)
• Tip: Implementing single sign-on in the J2EE server engine (SearchSecurity.com)
• Tip: SAP authorizations (SearchSAP.com)
• Advice: SAP authorization and security classes (SearchSAP.com)
• Advice: Assigning limited password reset-authority (SearchSAP.com)
• Quiz: Passwords (SearchSecurity.com)
• Quiz: Secure passwords (SearchSecurity.com)
• Quiz: Authentication methods (SearchSecurity.com)
• Featured Topic: SAP passwords revealed (SearchSAP.com)
• Chapter Download: Hacking For Dummies: Chapter 7 -- Passwords (SearchSecurity.com)
• Presentation: Case study: The USPS gives SSO its stamp of approval (SearchSecurity.com)

Data Protection

Return to Table of Contents

         Regulatory Compliance

• Article: SAP to bolster compliance with reseller partnership (SearchSAP.com)
• Article: SAP launches Trade Services upgrade (SearchSAP.com)
• Article: Privacy: How much regulation is too much? (SearchSecurity.com)
• Q&A: CSO interview: Regulatory pain is a two-way street (SearchSecurity.com)
• Tip: Will the 'regulatory police' be knocking on your door? (SearchSecurity.com)
• Tip: SOX 404 compliance: Efficiency is key (SearchSecurity.com)
• Tip: SOX-in-a-box: One size does not fit all when it comes to compliance (SearchSecurity.com)
• Quiz: Respecting the letter of the law (SearchSecurity.com)
• Resource Guide: Compliance management (SearchSAP.com)
• Resource Guide: HIPAA (SearchSecurity.com)

• Article: SAP advises to take RFID one step at a time (SearchSAP.com)
• Article: Will new RFID technology help or hinder security? (SearchSecurity.com)
• Article: Low-cost way(s) to 'foil' low-tech RFID tags (SearchSecurity.com)
• Q&A: RFID secrets: SAP customers ready systems for RFID (SearchSAP.com)
• Advice: Is RFID ready for primetime? (SearchSAP.com)
• Featured Topic: RFID on the rise? (SearchSAP.com)
• Resource Guide: SAP RFID (SearchSAP.com)

• Article: Cheat sheet: 10 ways to prep for auditors (SearchSecurity.com)
• Article: Report: IT shops lax about logging (SearchSecurity.com)
• Article: SAP packs GTS application for FedEx (SearchSAP.com)
• Article: Oops! True IT blooper #3: What About Bob? (SearchSAP.com)
• Tip: Best practices for choosing an outside IT auditor (SearchSecurity.com)
• Tip: Who's afraid of auditing? (SearchSecurity.com)
• Tip: Transport program TP information logging (SearchSAP.com)

Platform/Operating System Security

Return to Table of Contents

• Article: Finding the mean between SAP and Microsoft portal extremes (SearchSAP.com)
• Article: Microsoft IT team touts SAP testing (SearchSAP.com)
• Article: Despite direct competition, Microsoft, SAP to solve integration ills (SearchSAP.com)
• Article: Can an Apple a day keep security issues at bay? (SearchSecurity.com)
• Article: Microsoft further tightens security in Windows Server (SearchSecurity.com)
• Article: Linux vs. Windows: Analysts question assumptions about security, TCO (SearchSecurity.com)
• Advice: Using Linux on the mainframe (SearchSecurity.com)
• Advice: Single sign-on for UNIX (SearchSAP.com)
• Advice: I learned SAP BW on Windows, how does this compare to Unix? (SearchSAP.com)
• Commentary: MacIntosh vs. Windows: Choosing to take a bite of the Apple (SearchSecurity.com)
• Tip: Uploading transport files from Windows to UNIX on IBM (SearchSAP.com)
• Tip: Battle of the OSes: Which is most secure? (SearchSecurity.com)
• Tip: Essential Linux skills (SearchSecurity.com)
• Chapter Download: Hacking Windows: MSRPC vulnerabilities (searchSecurity.com)

Vulnerability Management

Return to Table of Contents

• Article: Customers warned of critical SAP flaw (SearchSAP.com)
• Article: How to survive a data breach (SearchSecurity.com)
• Tip: Eliminating spam with SpamAssassin, DSPAM and ClamAV (SearchSAP.com)
• Tip: Firewalls: How to choose what's right for you (SearchSAP.com)
• Advice: Is it possible to scan an SAP e-mail attachment for a virus/worm? (SearchSAP.com)
• Advice: Errors with uploading patches in 4.7 (SearchSAP.com)
• Advice: Decompressing HR patches (SearchSAP.com)
• Advice: Can I supply packages while users are online? (SearchSAP.com)
• Advice: Applying support packages in the development box (SearchSAP.com)
• Advice: What is the best way to encrypt messages? (SearchSAP.com)
• Advice: How do I secure an IDoc? (SearchSAP.com)
• Advice: Password protected e-mails (SearchSAP.com)

Disaster Recovery

Return to Table of Contents

• Article: Disaster recovery: Are you prepared? (SearchSAP.com)
• Article: Concerns raised on tape backup methods (SearchSecurity.com)
• Tip: Disaster recover spending -- How much is enough? (SearchSAP.com)
• Tip: BCP plans key to emergency planning (SearchSAP.com)
• Tip: Disaster recovery (SearchSAP.com)
• Tip: Restore a back-up tape and recover usable data (SearchSecurity.com)
• Tip: Disaster recovery/business continuity plans (SearchSecurity.com)
• Webcast: Evaluating & using wireless to enable crisis management (SearchSecurity.com)

Consultant's Corner

Return to Table of Contents

• Advice: Security consultant wanting to make the move to SAP (SearchSAP.com)
• Advice: The next step for an experienced SAP Security consultant (SearchSAP.com)
• Article: For SAP professionals, security certification can pay (SearchManufacturingERP.com)
• Advice: SAP security analysts salary (SearchSAP.com)
• Advice: SAP Security course for R/3 4.6C (SearchSAP.com)
• Article: CISSP among highest paying certifications (SearchSecurity.com)
• Security School: Training for CISSP Certification (SearchSecurity.com)
• Resource Guide: SearchSecurity.com Guide to Infosec Certifications (SearchSecurity.com)
• Resource Guide: Vendor-specific security certs (SearchSecurity.com)

More Learning Guides

Return to Table of Contents

• SAP Certification Learning Guide (SearchSAP.com)


• Application Security Learning Guide (SearchSAP.com)


• SAP CRM Learning Guide (SearchSAP.com)


• ERP guide for the midmarket (SearchSAP.com)
• SAP Job Seeker's Learning Guide (SearchSAP.com)
• SAP Career Advancement Learning Guide (SearchSAP.com)
• SAP NetWeaver Learning Guide (SearchSAP.com)
• SAP BW Learning Guide (SearchSAP.com)
• Business Intelligence (BI) Learning Guide (SearchSAP.com)
• SAP HR Learning Guide (SearchSAP.com)
• SAP XI Learning Guide (SearchSAP.com)
• SAP RFID Learning Guide (SearchSAP.com)
• BAPI Learning Guide (SearchSAP.com)
• Basis Learning Guide (SearchSAP.com)
• Firewall Resource Guide (SearchSecurity.com)
• HIPAA Learning Guide (SearchSecurity.com)
• VoIP Security Resource Guide (SearchSecurity.com)