Scanning Vulnerabilities and Risks in User Accounts, Roles, and Profiles Security in SAP ECC and S/4 HANA

Can you imagine having a scanner that allows you to detect vulnerabilities and risks in the privileges assigned to user accounts?

Imagine how you could strengthen the security of your SAP system proactively and efficiently:

The new CentinelBox service will allow you to proactively take action to resolve them and achieve favourable and beneficial results:

☑️ Efficiency: Early action leads to quicker and more efficient realisation by avoiding unnecessary delays.

☑️ Seizing Opportunities: Acting promptly enables us to seize valuable opportunities that might be missed if we wait too long.

☑️ Stress Reduction: Addressing matters early reduces the build-up of workload and the stress associated with pending tasks.

☑️ Adaptability: Taking prompt actions allows us to better adapt to changes or unexpected situations.

Check out our introductory rates and hire this service, and you will receive a daily report with recommendations to take early actions to prevent or mitigate future issues.
“We will use CentinelBox (on-premise) at no additional cost to the customer.”

Our daily report provides information that allows for immediate actions to be taken based on items such as the following:

➡️ Alarms:

• Use of critical transactions (basis and functional)
• Use of conflicting transactions for segregation (basis and functional)
• Login to accounts of interest for tracking.

➡️ Accounts with critical profiles (SAP_ALL and 30 similar profiles):

• Accounts with critical profiles.
• Accounts and usage of dialog transactions.

➡️ User accounts:

• Inventory of user accounts.
• Creations.
• Deletions.

➡️ Other user account categories:

• Active accounts without assigned roles.
• Inactive Accounts (not blocked, with assigned roles)
• Accounts without access to the system since creation.
• Accounts without access to the system in the last few days.

➡️Temporarily assigned roles

➡️ Roles assigned in the last few days.

➡️ Roles created/modified in the last few days.

➡️ Zombie profiles and used transactions.

➡️ Assigned critical authorisation objects.

• Inventory of assigned and used transactions

• Transactions without authorisation object definition in SU24

➡️ System modifications.

➡️ Adjustment of user master data.

Furthermore, you can add additional services:

☑️ Monthly report on security status with detected risks, analysis of critical and conflicting transactions, recommendations, and action plan.

☑️ Preventive risk analysis before assigning new privileges to user accounts.

☑️ Security remediation recommendations to avoid exposure to risks.

☑️ Loading of segregation of duties conflict matrix configured by the client. The risk matrix used for detection is the standard CentinelBox matrix.

WANT TO LEARN MORE ABOUT CENTINELBOX AND HOW WE CAN HELP YOU TAKE CONTROL OF YOUR SAP SECURITY?

Schedule a personalised demo directly with me so you can see how our platform enables assertive and successful internal control.