SAP Security Resources
On this page we have collated links and summaries of all the SAP Security resources we could find on the web. This page will be continually updated with new sites and our hope is that you will never need to visit another site to find SAP security information.
Submit a SAP Security related Site
If you know of a useful resource for SAP Security that isn't mentioned here, you can submit a site for us to review for inclusion.
Page 1 of 2 | › Next
The Australian National Audit Office (ANAO)
Better Practice Guide - Security and Control Update For SAP R/3 »
Overview:
This guide is intended primarily to provide an overview to executives and senior managers of the structure and use of the Australian National Audit Office’s Handbook on Security and Control for SAP/R3.
• Contains a good overview for SAP Security for the following areas:
• Basis and Cross Application Components (BC)
• Procurement to Payables (MM)
• Financial Accounting (FI)
• Controlling (CO)
• Human Resources (HR)
• Audit Information System (AIS)
The information within these areas goes down to Transaction and Authorisation Object level.
The FIST Conferences
Overview:
Concept document concerning SAP Network Security, Cryptography, Encryption & various SAP Sign-On options. Some information on the configuration of SNC.
Government of Nova Scotia
Central Financial Management – Audit Report »
Overview:
Audit report/review of the SAP Security landscape. Document contains informative information (non-technical) describing the audit report, detailing issues followed by recommendations.
Information Systems Audit and Control Association (ISACA)
Security, Audit and Control Features SAP® R/3®:
A Technical and Risk Management Reference Guide »
Overview:
A book specialising in Control and Risks particularly for the SAP R/3 System.
The Institute of Internal Auditors
Introduction to Auditing SAP R/3 (IIA/Deloitte) »
Overview:
Predominately a training site offering various seminars concerning the SAP System. More focus is given to the auditing of an SAP System, with basic-medium emphasis on SAP Security. Training delivered onsite at Deloitte&Touche by their own practitioners.
Microsoft
SAP Security for Windows Server »
Overview:
Presentation by a Microsoft/SAP Consultant, concerning mostly the IT Infrastructure Security - Network/Host/Server, etc.
The SANS™ Institute
Technical Aspect of Implementing/Upgrading SAP Security 4.6 »
also
http://www.securitydocs.com/library/1022 »
Overview:
Provides information down to Authorisation Object level detail on Critical Authorisation Objects, Parameters & powerful Role Development. The SANS website contains some information relevant to SAP Security.
SAP AuditNet
Security - ERP GENERAL (SAP, BaaN, Oracle, PeopleSoft) »
Overview
Although this site specialises in Auditing (Many SAP Audit Documents), a vast range of SAP Security documents from various sources can be obtained. Details of Company security design, SOX, BW, CUA, R3. Some documents sourced from large corporate companies.
SAPFANS.com
Overview:
Huge number of posts (100+pages), and some quite detailed replies.
Page 1 of 2 | › Next