Multiple Layers of Security: While costs are always a key consideration—they aren't the only factor

Over the past ten years or so, the topic of security has become increasingly important, particularly in the SAP environment. As recently as this spring, during the DSAG Technology Days, three „layers“ took center stage under the chosen theme „Lights on Layers.“.

Security was one of them (along with artificial intelligence and data, or data management). The large number of security notes published by SAP every month on „patch days“ also speaks volumes and underscores the high priority placed on security.

SAP Security by Any Means Necessary

Nevertheless, the topic of security in the SAP environment is extremely multifaceted. Ultimately, SAP user companies must always use every available means to counter potential security risks—to ensure that no system failures or, worse yet, disruptions to business continuity occur. After all, no one wants to be blamed in the event of a crisis for failing to implement standard security measures.

When it comes to security, the focus here and now should be on SAP Basis—or, more specifically, on how the use of SAP Basis automation helps to enhance security in the long term.

Consistently High Process Quality

As is well known, SAP Basis is essentially responsible for all SAP infrastructure matters. In a sense, the SAP Basis teams provide technical services for an SAP environment to ensure that SAP applications run as smoothly as possible and that companies benefit from SAP. However, it is also a fact that the tasks and activities of SAP Basis are diverse and constantly evolving.

Although SAP Basis teams are increasingly turning to SAP Basis automation—and thus to SAP Basis automation solutions—this is by no means a universal or comprehensive practice.

When organizations choose to adopt SAP Basis automation solutions, cost-benefit considerations are often the primary focus, which is generally a positive development.

After all, it makes a big difference whether SAP Basis tasks take only about two days or as long as a week when using SAP Basis automation software. However, the aspect of security—specifically, security and resilience for and within SAP Basis—is often neglected.

SAP Basis automation systems based on suites, for example, ensure that all SAP systems are truly taken into account in their entirety in reporting—for instance, when creating copies of SAP systems or when accounting for all certificates in SAP Certificate Management. In addition, functions for pre-production checks ensure that preliminary testing verifies the results are correct and consistent.

Basis: Best-Practice Processes

Furthermore, with SAP Basis automation, processes are always executed to the same high standard based on best-practice procedures, which provides additional security for SAP Basis. This level of resilience is not present when tasks or activities are performed manually or semi-automatically. Automation simply eliminates the possibility that subtasks will be skipped or forgotten. After all, when creating an SAP system copy, for example, well over 50 process steps must be completed or carried out. In addition to the overarching security aspect for the SAP Basis outlined above, the individual solutions (commonly referred to as “apps”) used within the SAP Basis software itself naturally play an important role as well. The following examples illustrate this:

A reporting app from an SAP Basis automation suite lists the status of all SAP systems, including all key SAP system components, and displays their „status“ using traffic-light indicators. Potential problems can be addressed proactively, such as identifying possible database timeouts or potential memory issues.

A compliance app can be used to ensure that company policies are followed; for example: Was a transaction-accurate copy of the SAP system created at a specified time, for example, for an auditor?

Certificate Management

Certificate management is becoming increasingly important. An app for SAP Certificate Management is provided for this purpose. Background: Certificates must be renewed at ever-shorter intervals. If this is not done, systems may become unusable.

A certificate management app of this kind displays and monitors all SAP certificates; it also provides timely alerts for required renewals, automatically renews them, and deletes certificates that are no longer needed. Modern certificate apps also manage non-SAP certificates.

SAP Basis automation apps for handling or managing the SAP Security Notes (SEC Notes) mentioned earlier have been available for quite some time. Essentially, the SEC Notes—along with any necessary code fixes—can be downloaded from the SAP Marketplace. They must also be analyzed and verified based on priority or importance. And it is necessary to determine which systems are affected by a code fix.

In addition, it is necessary to determine whether there are any potential dependencies with other SEC Notes or whether an SEC Note has already been imported. An SEC Notes app is capable of fully automating manual tasks. This also ensures 100 percent reliability for an individual SAP customer environment, preventing any important SEC Notes from being overlooked or ignored.

Security Is of Great Importance

In summary, it can be said that security is now a top priority for both SAP and SAP users, although it is a complex and multifaceted issue. It has long been of great relevance within and for the SAP Basis environment as well.

SAP Basis automation not only delivers cost and time savings, but also eliminates security risks. Or, to put it another way: it provides the necessary improved resilience for SAP system operations.

And this applies on several levels: on the one hand, within SAP Basis, by ensuring consistently high process quality for the SAP Basis teams; on the other hand, for SAP Basis itself, through sophisticated, security-compliant solutions and apps.

To the partner entry: