SAP Security and AuthorizationsRisk Management and Compliance with Legal Regulations in the SAP Environment

This book gives technical consultants, IT managers, and authorization administrators an in-depth look at all aspects of IT security in the SAP NetWeaver environment. An introduction to the overall subject matter helps you get up to speed quickly on topics like risk evaluation, creating control options, designing security measures – and teaches you the appropriate procedures for implementing the supporting processes. You’ll also benefit from an overview of international security standards and legal regulations (e.g., Sarbanes-Oxley Act and Basel II), and you'll discover the best SAP security strategies and practices to ensure compliance. The second part of the book is dedicated to the technical implementation of these security measures. From the authorization concept to measures concerning infrastructure in the portal environment and collaboration scenarios with SAP XI through to process planning, the authors leave no rock unturned. This book uses examples to describe the potential risks as well as specific application and system security concepts for individual SAP components and solutions. Bonus: Includes a complete map of the Global Security Positioning System – an ideal navigation aid, not only while reading the book but also for ongoing assistance with your daily work. Highlights Include: - SAP security strategies and best practices - Basic principles of technical security - Risk and control management - Legal and intra-enterprise requirements - Country-specific security standards - Application security for SAP NetWeaver and SAP solutions - Technical implementation - Graphical display of technology layers using the Global Security Positioning System