Simplifying RISE with SAP Security & Compliance with the RISE with SAP Baseline
Share Article
RISE with SAP customers running S/4HANA or other ABAP-based SAP systems must make sure these systems adhere to the RISE with SAP policies before migrating to the SAP cloud. SAP released a mandatory list of parameters and configuration settings for all ABAP systems running in RISE with SAP. The settings overview is detailed in SAP Note 3250501 (Information on Mandatory Security Parameters & Hardening Requirements for ABAP systems in SAP Enterprise Cloud Services (ECS)).
The mandatory parameters and configuration include a basic list of security-relevant parameters but also a mandatory configuration in areas of deleting unused clients, securing SAP standard users, restricting access to password hashes, RFC gateway and message server hardening, deactivating critical ICF services, etc.
As mentioned, this mandatory list of parameters and settings is not only applicable to customers already on RISE but also provides great help for those who want to migrate to the SAP Cloud. They can check upfront whether their SAP systems are compliant. If not, they should ensure their systems are hardened beforehand. This saves time during the migration process and strengthens the security of their SAP systems. To help our customers, we have added the RISE with SAP baseline to the set of default baselines shipped with the SecurityBridge Platform.
Note: The RISE with SAP baseline is a set of mandatory settings but does not cover all security-relevant settings and parameters. As mentioned, it is a minimum set. However, once customers have landed on RISE, they should further enhance security and harden their SAP systems. To achieve a higher level of security excellence, we recommend using the SecurityBridge STANDARD baseline and the DEFAULT template for security auditing.
To learn more about RISE with SAP and SecurityBridge, read our previous blog post or contact us. We will be happy to tell you more about our guided approach to SAP Security excellence. For more SAP security-related news, articles, and whitepapers, please follow us on LinkedIn!
