SAP Security Monitoring Best Practices
1) Get from 1 star to 4 stars quickly
If your organization does not have real-time SAP security monitoring yet, you will need the right technology and processes to address this quickly. So far our most successful real-time SAP security monitoring implementations include utilizing Enterprise Threat Monitor for monitoring one or more SAP systems initially to gain hands-on experience.
This experience allows you to understand your organization’s usage patterns and how security exception management and its communication must come within your organization. Based on this information you can define new processes or improve existing processes for handling SAP security incidents.One of the key elements of this approach is management visibility. The success is instantly visible and this allows you to gain support or write the business case for increasing the scope of what is monitored and how it is managed.
2) Reevaluate the current stance
After your organization has a basic understanding of operational activities of real-time SAP security monitoring, you can reevaluate your current posture as well as other areas in security, including SAP system hardening and ABAP security, and decide whether it is best for you to focus on improving the current processes and technology or to focus on a different area of SAP security.
3) Work on achieving 5 stars if required
If you decide to optimize your SAP security monitoring, you can utilize Enterprise Threat Monitor Advanced and proceed with integration and customization related options. This will allow better in-depth monitoring of your SAP landscapes.