Skip to content
SAP security audit webinar

How to Close the Gap in SAP Compliance

When the Auditors ring the doorbell, every SAP client knows what happens next. Even though such audits are important to stay compliant and competitive it’s often also a lot of work. Detailed planning and preparation might help you avoid unpleasant situations.

Christoph Nagy, CEO of SecurityBridge, discusses with Carsten Crantz from PwC Germany on how to master this challenging task. Many SAP clients and their system infrastructures have been audited by PwC Germany.

Attend this event to learn how an auditor examines a customer scenario and how to address the “paper gap” that often exists in SAP compliance.

Key takeaways:

  • A top auditor’s perspective on SAP compliance

  • Analyze audit findings and prevent them in the future

  • Guidance on how to spot and investigate SAP compliance issues

  • How SecurityBridge can assist you in keeping your SAP systems compliant

Date & Time

on-demand

Event Details

Date

on-demand

In cooperation with PwC Germany

Download the White Paper “Bridging the Gap – How SecurityBridge Supports NIST CSF in SAP Environments”. Learn how choosing the right tool can significantly shorten the journey of NIST CSF adoption and improve the security posture of SAP environments.
hacking
In SAP’s patch round of February 2022, an SAP Security Note was released with a CVSS score of 10/10 named, “Request smuggling and request concatenation in SAP NetWeaver, SAP Content Server and SAP Web Dispatcher”. This particular type of vulnerability is not common in SAP systems and therefore interesting to look at. As patching the SAP kernel executables is often not done promptly, we can expect this vulnerability present in the customer’s systems for quite some time.
code pc
In one of our recent articles, we pointed out the use of Access Control Lists (ACLs) to better manage access control. Below, we will show a practical example of how this can be done for inbound HTTP communication with the ‘Internet Communication Manager’ (ICM) component of an SAP system.
SAP Security Patch Tuesday 2024
For February 2024, 13 new Security Notes have been released and 3 have been updated. Lets look at some highlights, starting with the ‘HowNews’ notes.