
	Home > SAP Tips > SAP best practices > SAP Security Learning Guide

SAP Tips:

EMAIL THIS

TIPS & NEWSLETTERS TOPICS

SAP BEST PRACTICES

SAP Security Learning Guide

Jenny Wiseman and Lauren Hoyt
08.29.2005
Rating: -4.67- (out of 5)

Digg This!

StumbleUpon

Del.icio.us

This guide was created in partnership between:

Need to bulletproof your SAP system? This handy Learning Guide pulls SAP security information from both SearchSAP.com and its sister site, SearchSecurity.com, to provide the most comprehensive resource around. Get the scoop on everything from authentication and RFID security to compliance and auditing here!

Also, don't forget to send us an e-mail to let us know what other resource guides you'd like to see on SearchSAP.com.

Best regards,
The editors of SearchSAP.com and SearchSecurity.com

TABLE OF CONTENTS

   Introduction to SAP Security
   Identity and Access Management
   Data Protection
   Platform/Operating System Security
   Vulnerability Management
   Disaster Recovery
   Consultant's Corner
   More Learning Guides

  Introduction to SAP Security Return to Table of Contents

Article: Security needs bring redundant systems back in style (SearchSecurity.com)
Article: Open source tools: A thrifty security manager's best friend (SearchSecurity.com)
Advice: SAP Security vs. others (SearchSAP.com)
Advice: Best security practices for large SAP installations (SearchSAP.com)
Advice: Common SAP security practices (SearchSAP.com)
Advice: Security concerns when upgrading from v.3.1 to v.4.6x (SearchSAP.com)
Tip: Establishing security parameters (SearchSAP.com)
Tip: Judicious use of tips (SearchSAP.com)

Identity and Access Management Return to Table of Contents

Article: Tackling identity theft (SearchSecurity.com)
Advice: Secure social security reports (SearchSAP.com)
Advice: Internal interface development vs. third-party middleware (SearchSAP.com)
Tip: Synchronizing SAP with an external user registry (SearchSAP.com)
Tip: It's not what you know; it's who you... are: The identity management challenge (SearchSecurity.com)
Chapter Download: Identity and Access Management: Provisioning (SearchSecurity.com)

Authentication and Authorization

Article: The latest play on passwords (SearchSecurity.com)
Article: Sun converts Web SSO authentication to open source (SearchSecurity.com)
Article: Is single sign-on ready for prime time? (SearchSecurity.com)
Tip: Authentication and access (SearchSecurity.com)
Tip: Prevent password change (SearchSAP.com)
Tip: Passwords -- Updating, selecting and recording user and administrative passwords (SearchSecurity.com)
Tip: Password policy worst practices (SearchSecurity.com)
Tip: Parameters for establishing SAP password policies (SearchSAP.com)
Tip: How to avoid authentication bypass attacks (SearchSecurity.com)
Tip: Implementing single sign-on in the J2EE server engine (SearchSecurity.com)
Tip: SAP authorizations (SearchSAP.com)
Advice: SAP authorization and security classes (SearchSAP.com)
Advice: Assigning limited password reset-authority (SearchSAP.com)
Quiz: Passwords (SearchSecurity.com)
Quiz: Secure passwords (SearchSecurity.com)
Quiz: Authentication methods (SearchSecurity.com)
Featured Topic: SAP passwords revealed (SearchSAP.com)
Chapter Download: Hacking For Dummies: Chapter 7 -- Passwords (SearchSecurity.com)
Presentation: Case study: The USPS gives SSO its stamp of approval (SearchSecurity.com)

Data Protection Return to Table of Contents

Regulatory Compliance

Article: SAP to bolster compliance with reseller partnership (SearchSAP.com)
Article: SAP launches Trade Services upgrade (SearchSAP.com)
Article: Privacy: How much regulation is too much? (SearchSecurity.com)
Q&A: CSO interview: Regulatory pain is a two-way street (SearchSecurity.com)
Tip: Will the 'regulatory police' be knocking on your door? (SearchSecurity.com)
Tip: SOX 404 compliance: Efficiency is key (SearchSecurity.com)
Tip: SOX-in-a-box: One size does not fit all when it comes to compliance (SearchSecurity.com)
Quiz: Respecting the letter of the law (SearchSecurity.com)
Resource Guide: Compliance management (SearchSAP.com)
Resource Guide: HIPAA (SearchSecurity.com)

RFID

Article: SAP advises to take RFID one step at a time (SearchSAP.com)
Article: Will new RFID technology help or hinder security? (SearchSecurity.com)
Article: Low-cost way(s) to 'foil' low-tech RFID tags (SearchSecurity.com)
Q&A: RFID secrets: SAP customers ready systems for RFID (SearchSAP.com)
Advice: Is RFID ready for primetime? (SearchSAP.com)
Featured Topic: RFID on the rise? (SearchSAP.com)
Resource Guide: SAP RFID (SearchSAP.com)

Auditing

Article: Cheat sheet: 10 ways to prep for auditors (SearchSecurity.com)
Article: Report: IT shops lax about logging (SearchSecurity.com)
Article: SAP packs GTS application for FedEx (SearchSAP.com)
Article: Oops! True IT blooper #3: What About Bob? (SearchSAP.com)
Tip: Best practices for choosing an outside IT auditor (SearchSecurity.com)
Tip: Who's afraid of auditing? (SearchSecurity.com)
Tip: Transport program TP information logging (SearchSAP.com)

Platform/Operating System Security Return to Table of Contents

Article: Finding the mean between SAP and Microsoft portal extremes (SearchSAP.com)
Article: Microsoft IT team touts SAP testing (SearchSAP.com)
Article: Despite direct competition, Microsoft, SAP to solve integration ills (SearchSAP.com)
Article: Can an Apple a day keep security issues at bay? (SearchSecurity.com)
Article: Microsoft further tightens security in Windows Server (SearchSecurity.com)
Article: Linux vs. Windows: Analysts question assumptions about security, TCO (SearchSecurity.com)
Advice: Using Linux on the mainframe (SearchSecurity.com)
Advice: Single sign-on for UNIX (SearchSAP.com)
Advice: I learned SAP BW on Windows, how does this compare to Unix? (SearchSAP.com)
Commentary: MacIntosh vs. Windows: Choosing to take a bite of the Apple (SearchSecurity.com)
Tip: Uploading transport files from Windows to UNIX on IBM (SearchSAP.com)
Tip: Battle of the OSes: Which is most secure? (SearchSecurity.com)
Tip: Essential Linux skills (SearchSecurity.com)
Chapter Download: Hacking Windows: MSRPC vulnerabilities (searchSecurity.com)

Vulnerability Management Return to Table of Contents

Article: Customers warned of critical SAP flaw (SearchSAP.com)
Article: How to survive a data breach (SearchSecurity.com)
Tip: Eliminating spam with SpamAssassin, DSPAM and ClamAV (SearchSAP.com)
Tip: Firewalls: How to choose what's right for you (SearchSAP.com)
Advice: Is it possible to scan an SAP e-mail attachment for a virus/worm? (SearchSAP.com)
Advice: Errors with uploading patches in 4.7 (SearchSAP.com)
Advice: Decompressing HR patches (SearchSAP.com)
Advice: Can I supply packages while users are online? (SearchSAP.com)
Advice: Applying support packages in the development box (SearchSAP.com)
Advice: What is the best way to encrypt messages? (SearchSAP.com)
Advice: How do I secure an IDoc? (SearchSAP.com)
Advice: Password protected e-mails (SearchSAP.com)

Disaster Recovery Return to Table of Contents

Article: Disaster recovery: Are you prepared? (SearchSAP.com)
Article: Concerns raised on tape backup methods (SearchSecurity.com)
Tip: Disaster recover spending -- How much is enough? (SearchSAP.com)
Tip: BCP plans key to emergency planning (SearchSAP.com)
Tip: Disaster recovery (SearchSAP.com)
Tip: Restore a back-up tape and recover usable data (SearchSecurity.com)
Tip: Disaster recovery/business continuity plans (SearchSecurity.com)
Webcast: Evaluating & using wireless to enable crisis management (SearchSecurity.com)

Consultant's Corner Return to Table of Contents

Advice: Security consultant wanting to make the move to SAP (SearchSAP.com)
Advice: The next step for an experienced SAP Security consultant (SearchSAP.com)
Advice: SAP security analysts salary (SearchSAP.com)
Advice: SAP Security course for R/3 4.6C (SearchSAP.com)
Article: CISSP among highest paying certifications (SearchSecurity.com)
Security School: Training for CISSP Certification (SearchSecurity.com)
Resource Guide: SearchSecurity.com Guide to Infosec Certifications (SearchSecurity.com)
Resource Guide: Vendor-specific security certs (SearchSecurity.com)

More Learning Guides Return to Table of Contents

SAP Job Seeker's Learning Guide (SearchSAP.com)
SAP Career Advancement Learning Guide (SearchSAP.com)
SAP NetWeaver Learning Guide (SearchSAP.com)
SAP BW Learning Guide (SearchSAP.com)
SAP BI Learning Guide (SearchSAP.com)
SAP HR Learning Guide (SearchSAP.com)
SAP XI Learning Guide (SearchSAP.com)
SAP RFID Learning Guide (SearchSAP.com)
BAPI Learning Guide (SearchSAP.com)
Basis Learning Guide (SearchSAP.com)
Firewall Resource Guide (SearchSecurity.com)
HIPAA Learning Guide (SearchSecurity.com)
VoIP Security Resource Guide (SearchSecurity.com)

Rate this Tip
To rate tips, you must be a member of SearchSAP.com. Register now to start rating these tips. Log in if you are already a member.

Digg This!

StumbleUpon

Del.icio.us

RELATED CONTENT

	Web Security
	Top 10 SAP tips of 2007
	Privacy and your offshore operations
	Managed security services: What's right for you?
	Nmap Technical Guide
	Security buying in five easy steps
	Data management podcast briefing: Trends in data governance, with Gwen Thomas
	Data destruction
	Effectively using vulnerability management data
	Eliminating spam with SpamAssassin, DSPAM and ClamAV
	SAP authorizations

SAP best practices

Top 10 SAP tips of 2007

Retrieve BI data with Web Services

Eliminate database read/write times with ABAP shared memory

Model-driven development in the enterprise

Budgeting Best Practices with SAP Business Planning -- Part II

Budgeting best practices with SAP business planning

Currency translation using SAP BI

How to acquire the runtime information of a data transfer process (DTP)

Smart Forms vs. PDF-based print forms in SAP solutions -- pros and cons

Defining shared services and shared outcomes in the public sector

RELATED RESOURCES

2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems

Search Bitpipe.com for the latest white papers and business webcasts

Whatis.com, the online computer dictionary

DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.

SEARCH

TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.


TechTarget Corporate Web Site \| Media Kits \| Reprints \| Site Map All Rights Reserved, Copyright 2000 - 2008, TechTarget \| Read our Privacy Policy SearchSAP.com is a search service provided by TechTarget and is completely independent of and not affiliated with SAP AG.