{"id":66929,"date":"2026-08-07T11:30:58","date_gmt":"2026-08-07T09:30:58","guid":{"rendered":"https:\/\/xiting.com\/?post_type=sap-knowledge&#038;p=66929"},"modified":"2026-08-17T17:58:06","modified_gmt":"2026-08-17T15:58:06","slug":"sap-security","status":"publish","type":"sap-knowledge","link":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-security\/","title":{"rendered":"SAP Security: How to protect your SAP Landscape"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"66929\" class=\"elementor elementor-66929 elementor-66152\" data-elementor-post-type=\"sap-knowledge\">\n\t\t\t\t<div class=\"elementor-element elementor-element-306b88f9 e-flex e-con-boxed e-con e-parent\" data-id=\"306b88f9\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-483ebeb0 elementor-hidden-mobile e-flex e-con-boxed e-con e-child\" data-id=\"483ebeb0\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6951ccd8 elementor-widget-mobile__width-initial elementor-widget elementor-widget-button\" data-id=\"6951ccd8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-xs\" href=\"https:\/\/xiting.com\/en\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-home\"><\/i>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2c72f78 elementor-widget elementor-widget-text-editor\" data-id=\"2c72f78\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>\/<\/p><br>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-63597521 elementor-widget-mobile__width-initial elementor-widget elementor-widget-button\" data-id=\"63597521\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-xs\" href=\"https:\/\/xiting.com\/en\/sap-knowledge\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">SAP Knowledge<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2fdfff9d elementor-widget elementor-widget-text-editor\" data-id=\"2fdfff9d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>\/<\/p><br>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7662e818 elementor-widget-mobile__width-initial elementor-widget elementor-widget-button\" data-id=\"7662e818\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-xs\" href=\"https:\/\/xiting.com\/en\/sap-knowledge\/sap-security\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">SAP Security<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-e188bd8 e-flex e-con-boxed e-con e-parent\" data-id=\"e188bd8\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6ab4050b elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"6ab4050b\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">SAP Security<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2ad02835 e-con-full e-flex e-con e-child\" data-id=\"2ad02835\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-64237708 elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"64237708\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"far fa-calendar-alt\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">August 7, 2026<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5df8ca9a elementor-widget__width-auto elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"5df8ca9a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-equals\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">SAP Security<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5ac2decf elementor-widget__width-auto elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"5ac2decf\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"far fa-user\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Vanessa Albuera<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-23558cc2 e-con-full e-flex e-con e-child\" data-id=\"23558cc2\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1fa4b97 elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"1fa4b97\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">How to Protect Your SAP Landscape<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3a6ed62d elementor-widget elementor-widget-text-editor\" data-id=\"3a6ed62d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>SAP Security<span data-contrast=\"auto\">\u00a0is a critical topic for organizations that run their business-critical processes on SAP systems. These systems process sensitive financial data, HR information, and supply chain processes,\u00a0which is exactly why they are a prime target for cyberattacks.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">The April 2026 SAP Security Patch Day, which addressed a critical SQL injection vulnerability in SAP BW and BPC, shows\u00a0how relevant this topic\u00a0remains. At the same time, many decision-makers underestimate the actual\u00a0threat\u00a0landscape or assume that \u201cnothing will happen\u201d in their own system.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p><p><strong><span class=\"TextRun SCXW183015305 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW183015305 BCX8\" data-ccp-parastyle=\"Normal\">This article<\/span><span class=\"NormalTextRun SCXW183015305 BCX8\" data-ccp-parastyle=\"Normal\">\u00a0provides<\/span><span class=\"NormalTextRun SCXW183015305 BCX8\" data-ccp-parastyle=\"Normal\">\u00a0<\/span><span class=\"NormalTextRun SCXW183015305 BCX8\" data-ccp-parastyle=\"Normal\">you with<\/span><span class=\"NormalTextRun SCXW183015305 BCX8\" data-ccp-parastyle=\"Normal\">\u00a0a structured overview of fundamental security concepts and current challenges, through to the key areas for action.<\/span><\/span><span class=\"EOP Selected SCXW183015305 BCX8\" data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559685&quot;:0,&quot;335559737&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-b68afc2 e-con-full e-flex e-con e-child\" data-id=\"b68afc2\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-50e7dd5 elementor-widget elementor-widget-text-editor\" data-id=\"50e7dd5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>SAP Security: The Essentials at a Glance<\/h2><ul><li aria-setsize=\"-1\" data-leveltext=\"\u25cf\" data-font=\"\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u25cf&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">SAP Security covers technical, organizational, and procedural measures to protect business-critical SAP systems<\/span><span data-ccp-props=\"{&quot;335559739&quot;:80}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\u25cf\" data-font=\"\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u25cf&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">Risks often arise from a lack of transparency around authorizations and processes<\/span><span data-ccp-props=\"{&quot;335559739&quot;:80}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\u25cf\" data-font=\"\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u25cf&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"auto\">Standard functions and tools alone are\u00a0rarely\u00a0sufficient\u00a0without clear concepts and hands-on\u00a0expertise<\/span><span data-ccp-props=\"{&quot;335559739&quot;:80}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\u25cf\" data-font=\"\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u25cf&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"4\" data-aria-level=\"1\"><span data-contrast=\"auto\">Responsibility for SAP Security always lies with the organization itself \u2013 even in cloud and hybrid landscapes<\/span><span data-ccp-props=\"{&quot;335559739&quot;:80}\">\u00a0<\/span><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ce3d328 elementor-align-left elementor-widget__width-initial elementor-widget elementor-widget-button\" data-id=\"ce3d328\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-md\" href=\"https:\/\/xiting.com\/en\/request-demo\/\" target=\"_blank\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-angle-double-right\"><\/i>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Request a free Demo now!<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-43026bb7 elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"43026bb7\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">What is SAP Security? <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2f836a4 elementor-widget elementor-widget-text-editor\" data-id=\"2f836a4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"auto\">SAP Security refers to the overall concept for securing your SAP landscape \u2013 in other words, all the technical and organizational measures that ensure the confidentiality and availability of data and processes in your SAP systems.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">Unlike generic IT security, security in SAP is a\u00a0discipline in its own right.\u00a0SAP systems have their own authorization models with roles, profiles, and\u00a0<\/span><a href=\"https:\/\/xiting.com\/en\/sap-knowledge\/sap-authorization-objects\/\"><span data-contrast=\"none\">authorization objects<\/span><\/a><span data-contrast=\"auto\">, as well as specific attack surfaces such as RFC interfaces or custom ABAP code. Security measures must therefore always be designed and implemented within the SAP context.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">What makes this especially critical is that SAP systems form the operational backbone of an organization, running sensitive areas such as financial accounting or HR directly within them. A single mistake \u2013 an overprivileged role or an unpatched system, for example \u2013 can be enough to trigger compliance violations, business disruptions, or data leaks.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">In practice, we often see that these risks\u00a0don&#8217;t\u00a0just come from direct attacks, but also from structures that have grown organically over time, a lack of transparency,\u00a0and, above all, underestimated\u00a0responsibilities.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-583fc7ad elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"583fc7ad\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">The Structural Model: the SAP Secure Operations Map <\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2b3df302 elementor-widget elementor-widget-text-editor\" data-id=\"2b3df302\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span class=\"TextRun SCXW3056904 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW3056904 BCX8\" data-ccp-parastyle=\"Normal\">Anyone who wants to approach SAP Security in a structured way needs a clear framework. The key reference for this is the\u00a0<\/span><\/span><span class=\"TextRun SCXW3056904 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW3056904 BCX8\" data-ccp-parastyle=\"Normal\">SAP Secure Operations Map<\/span><\/span><span class=\"TextRun SCXW3056904 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW3056904 BCX8\" data-ccp-parastyle=\"Normal\">. It organizes all relevant security aspects of an SAP landscape into 5 layers, creating a shared foundation for IT, security, and\u00a0<\/span><\/span><a class=\"Hyperlink SCXW3056904 BCX8\" href=\"https:\/\/xiting.com\/en\/sap-knowledge\/security\/sap-compliance\/\" target=\"_blank\" rel=\"noreferrer noopener\"><span class=\"TextRun Underlined SCXW3056904 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SCXW3056904 BCX8\" data-ccp-charstyle=\"Hyperlink\">compliance<\/span><\/span><\/a><span class=\"TextRun SCXW3056904 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW3056904 BCX8\" data-ccp-parastyle=\"Normal\">.<\/span><\/span><span class=\"EOP Selected SCXW3056904 BCX8\" data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2269cad1 elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"2269cad1\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">The 5 Layers of the SAP Secure Operations Map <\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b73754d elementor-widget elementor-widget-html\" data-id=\"b73754d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<section class=\"xtn-table-section\">\r\n<div class=\"xtn-table-wrap\">\r\n<table class=\"xtn-table\">\r\n<thead>\r\n<tr>\r\n<th>Layer<\/th>\r\n<th>Focus<\/th>\r\n<th>Exemplary Tasks<\/th>\r\n<\/tr>\r\n<\/thead>\r\n<tbody>\r\n<tr>\r\n<td class=\"xtn-td-label\" data-label=\"Layer\">Environment<\/td>\r\n<td data-label=\"Focus\">Technical infrastructure outside SAP<\/td>\r\n<td data-label=\"Exemplary Tasks\">Network security, Operating System (OS) and database hardening, client security<\/td>\r\n<\/tr>\r\n<tr>\r\n<td class=\"xtn-td-label\" data-label=\"Layer\">System<\/td>\r\n<td data-label=\"Focus\">SAP platform and basis components<\/td>\r\n<td data-label=\"Exemplary Tasks\">Secure system configuration, patch management, vulnerability protection<\/td>\r\n<\/tr>\r\n<tr>\r\n<td class=\"xtn-td-label\" data-label=\"Layer\">Application<\/td>\r\n<td data-label=\"Focus\">SAP applications and custom code<\/td>\r\n<td data-label=\"Exemplary Tasks\"><a href=\"https:\/\/xiting.com\/en\/sap-knowledge\/sap-authorizations-explained\/sap-authorization-concepts\/\">Authorization concepts<\/a>, user access, securing ABAP and <a href=\"https:\/\/xiting.com\/en\/sap-knowledge\/sap-fiori\/\">Fiori applications<\/a><\/td>\r\n<\/tr>\r\n<tr>\r\n<td class=\"xtn-td-label\" data-label=\"Layer\">Process<\/td>\r\n<td data-label=\"Focus\">Business processes and compliance<\/td>\r\n<td data-label=\"Exemplary Tasks\">Meeting regulatory requirements, SoD-compliant process design<\/td>\r\n<\/tr>\r\n<tr>\r\n<td class=\"xtn-td-label\" data-label=\"Layer\">Organization<\/td>\r\n<td data-label=\"Focus\">Governance and responsibilities<\/td>\r\n<td data-label=\"Exemplary Tasks\">Security awareness, roles and responsibilities, risk management<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n<\/div>\r\n<\/section>\r\n\r\n<style>\r\n  .xtn-table-section{\r\n    --xtn-red:#cd1316;\r\n    --xtn-ink:#33373b;\r\n    --xtn-muted:#6a6f76;\r\n    --xtn-border:#ededed;\r\n    --xtn-bg:#ffffff;\r\n    --xtn-row-alt:#f9f9fa;\r\n    font-family:\"Open Sans\",-apple-system,BlinkMacSystemFont,\"Segoe UI\",sans-serif;\r\n    background:#ffffff;\r\n    padding:40px 20px;\r\n    box-sizing:border-box;\r\n  }\r\n  .xtn-table-section *{box-sizing:border-box;}\r\n\r\n  .xtn-table-wrap{\r\n    max-width:1200px;\r\n    margin:0;\r\n    border-radius:18px;\r\n    overflow-x:auto;\r\n    box-shadow:0 8px 28px rgba(20,20,20,.05);\r\n    border:1px solid var(--xtn-border);\r\n  }\r\n\r\n  .xtn-table{\r\n    width:100%;\r\n    min-width:1000px;\r\n    border-collapse:collapse;\r\n    background:var(--xtn-bg);\r\n  }\r\n\r\n  .xtn-table thead th{\r\n    background:var(--xtn-red);\r\n    color:#ffffff;\r\n    font-size:15px;\r\n    font-weight:700;\r\n    text-align:left;\r\n    padding:16px 22px;\r\n  }\r\n\r\n  .xtn-table tbody td{\r\n    font-size:14.5px;\r\n    line-height:1.6;\r\n    color:var(--xtn-muted);\r\n    padding:16px 22px;\r\n    border-bottom:1px solid var(--xtn-border);\r\n    vertical-align:top;\r\n    white-space:nowrap;\r\n  }\r\n\r\n  .xtn-table tbody tr:last-child td{\r\n    border-bottom:none;\r\n  }\r\n\r\n  .xtn-table tbody tr:nth-child(even){\r\n    background:var(--xtn-row-alt);\r\n  }\r\n\r\n  .xtn-td-label{\r\n    font-weight:700;\r\n    color:var(--xtn-ink);\r\n  }\r\n\r\n  .xtn-table tbody td a{\r\n    color:var(--xtn-red);\r\n    text-decoration:none;\r\n  }\r\n\r\n  \/* ---------- Responsive fine-tuning ---------- *\/\r\n  @media (max-width:767px){\r\n    .xtn-table-section{padding:32px 16px;}\r\n  }\r\n\r\n  \/* ---------- Mobile: table becomes stacked cards ---------- *\/\r\n  @media (max-width:600px){\r\n    .xtn-table-wrap{overflow-x:visible !important;border:none !important;box-shadow:none !important;border-radius:0 !important;}\r\n    .xtn-table{min-width:0 !important;display:block !important;width:100% !important;table-layout:auto !important;}\r\n    .xtn-table thead{display:none !important;}\r\n    .xtn-table tbody{display:block !important;}\r\n    .xtn-table tbody tr{\r\n      display:block !important;\r\n      width:100% !important;\r\n      height:auto !important;\r\n      margin-bottom:16px;\r\n      border:1px solid var(--xtn-border);\r\n      border-radius:14px;\r\n      overflow:visible !important;\r\n      box-shadow:0 6px 20px rgba(20,20,20,.05);\r\n    }\r\n    .xtn-table tbody tr:nth-child(even){background:var(--xtn-bg);}\r\n    .xtn-table tbody td{\r\n      display:block !important;\r\n      width:100% !important;\r\n      height:auto !important;\r\n      max-width:none !important;\r\n      padding:12px 16px;\r\n      border-bottom:1px solid var(--xtn-border);\r\n      white-space:normal !important;\r\n      overflow:visible !important;\r\n      text-overflow:unset !important;\r\n    }\r\n    .xtn-table tbody tr:last-child td:last-child,\r\n    .xtn-table tbody td:last-child{border-bottom:none;}\r\n    .xtn-table tbody td.xtn-td-label{\r\n      background:var(--xtn-red);\r\n      color:#ffffff;\r\n      font-size:15px;\r\n    }\r\n    .xtn-table tbody td:not(.xtn-td-label)::before{\r\n      content:attr(data-label);\r\n      display:block !important;\r\n      font-size:11px;\r\n      font-weight:700;\r\n      text-transform:uppercase;\r\n      letter-spacing:.03em;\r\n      color:var(--xtn-red);\r\n      margin-bottom:4px;\r\n    }\r\n  }\r\n<\/style>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-051f58b elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"051f58b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-angle-double-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">In practice, vulnerabilities rarely arise in isolation within a single layer. They're often the result of unclear responsibilities. <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-73abfec0 elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"73abfec0\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Overview of the Core Areas of SAP Security <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-39479e4 elementor-widget elementor-widget-text-editor\" data-id=\"39479e4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"xtn-article\">\n<p class=\"xtn-article-intro\">SAP Security covers several subareas that are closely interlinked in practice. Security only emerges from the interplay of these components.<\/p>\n\n<h3 class=\"xtn-article-h\"><svg class=\"xtn-article-icon\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path fill=\"currentColor\" d=\"M438.6 278.6c12.5-12.5 12.5-32.8 0-45.3l-160-160c-12.5-12.5-32.8-12.5-45.3 0s-12.5 32.8 0 45.3L338.8 224 32 224c-17.7 0-32 14.3-32 32s14.3 32 32 32l306.7 0L233.4 393.4c-12.5 12.5-12.5 32.8 0 45.3s32.8 12.5 45.3 0l160-160z\"\/><\/svg>SAP Authorization Management and Segregation of Duties<\/h3>\n<p class=\"xtn-article-p\"><a href=\"https:\/\/xiting.com\/en\/consulting\/authorization-management\/\">Authorization management<\/a> forms the foundation of any SAP security setup. Your roles, profiles, and authorization objects control which data and functions <a href=\"https:\/\/xiting.com\/en\/sap-knowledge\/management-with-su01\/\">users<\/a> are allowed to access.<\/p>\n<p class=\"xtn-article-p\">A key part of this is <a href=\"https:\/\/xiting.com\/en\/sap-knowledge\/segregation-of-duties\/\">segregation of duties (SoD)<\/a>. It ensures that critical process steps can&#8217;t be carried out by the same person. A classic example is the combination of invoice entry and payment release.<\/p>\n<p class=\"xtn-article-p\">In practice, many authorization concepts have grown organically over time. Regular reviews and consistently applying the least-privilege principle are essential for sustainably reducing risk.<\/p>\n\n<h3 class=\"xtn-article-h\"><svg class=\"xtn-article-icon\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path fill=\"currentColor\" d=\"M438.6 278.6c12.5-12.5 12.5-32.8 0-45.3l-160-160c-12.5-12.5-32.8-12.5-45.3 0s-12.5 32.8 0 45.3L338.8 224 32 224c-17.7 0-32 14.3-32 32s14.3 32 32 32l306.7 0L233.4 393.4c-12.5 12.5-12.5 32.8 0 45.3s32.8 12.5 45.3 0l160-160z\"\/><\/svg>Identity &amp; Access Management (IAM)<\/h3>\n<p class=\"xtn-article-p\"><a href=\"https:\/\/xiting.com\/en\/sap-knowledge\/identity-and-access-management-iam-in-sap\/\">Identity &amp; Access Management<\/a> governs the centralized management of user identities and access rights. The goal is to ensure that users always have exactly the authorizations they need for their tasks \u2013 no more, no less.<\/p>\n<p class=\"xtn-article-p\">IAM becomes more complex in hybrid SAP landscapes. You need to consider on-premise systems and cloud services together, while managing identities and authorizations consistently across systems.<\/p>\n\n<h3 class=\"xtn-article-h\"><svg class=\"xtn-article-icon\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path fill=\"currentColor\" d=\"M438.6 278.6c12.5-12.5 12.5-32.8 0-45.3l-160-160c-12.5-12.5-32.8-12.5-45.3 0s-12.5 32.8 0 45.3L338.8 224 32 224c-17.7 0-32 14.3-32 32s14.3 32 32 32l306.7 0L233.4 393.4c-12.5 12.5-12.5 32.8 0 45.3s32.8 12.5 45.3 0l160-160z\"\/><\/svg>Technical System Security and Patch Management<\/h3>\n<p class=\"xtn-article-p\">Alongside <a href=\"https:\/\/xiting.com\/en\/sap-knowledge\/sap-authorizations-explained\/\">authorizations<\/a> and identities, technical security is essential. This includes secure system configurations and structured patch management.<\/p>\n<p class=\"xtn-article-p\">SAP regularly publishes Security Notes as part of the SAP Security Patch Day. Organizations are responsible for evaluating these patches and implementing them promptly. In practice, however, updates are often applied with delay.<\/p>\n<p class=\"xtn-article-p\">Exposed interfaces such as RFC connections or the SAP Gateway are especially critical, since misconfigurations create an attack surface for cyberattacks.<\/p>\n\n<h3 class=\"xtn-article-h\"><svg class=\"xtn-article-icon\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path fill=\"currentColor\" d=\"M438.6 278.6c12.5-12.5 12.5-32.8 0-45.3l-160-160c-12.5-12.5-32.8-12.5-45.3 0s-12.5 32.8 0 45.3L338.8 224 32 224c-17.7 0-32 14.3-32 32s14.3 32 32 32l306.7 0L233.4 393.4c-12.5 12.5-12.5 32.8 0 45.3s32.8 12.5 45.3 0l160-160z\"\/><\/svg>Monitoring, Logging, and Incident Response<\/h3>\n<p class=\"xtn-article-p\"><a href=\"https:\/\/xiting.com\/en\/sap-knowledge\/sap-security-monitoring\/\">Monitoring and logging<\/a> are essential for detecting security incidents at an early stage. While preventive measures reduce risk, monitoring enables detection and response when an incident actually occurs.<\/p>\n<p class=\"xtn-article-p xtn-article-p-last\">Integration with SIEM systems and the growing importance of application-layer detection show that attacks are increasingly targeting SAP applications directly. Without structured monitoring, many of these activities go undetected.<\/p>\n\n<\/div>\n\n<style>\n  .xtn-article{\n    --xtn-red:#cd1316;\n    --xtn-ink:#1a1a1a;\n    font-family:\"Open Sans\",-apple-system,BlinkMacSystemFont,\"Segoe UI\",sans-serif;\n    max-width:100%;\n    width:100%;\n  }\n  .xtn-article *{box-sizing:border-box;}\n\n  .xtn-article-intro{\n    font-size:15.5px;\n    line-height:1.65;\n    color:var(--xtn-ink);\n    margin:0 0 36px;\n  }\n\n  .xtn-article-h{\n    display:flex;\n    align-items:center;\n    gap:10px;\n    font-size:19px;\n    line-height:1.3;\n    font-weight:600;\n    color:var(--xtn-ink);\n    margin:44px 0 18px;\n  }\n  .xtn-article-h:first-of-type{margin-top:0;}\n\n  .xtn-article-icon{\n    color:var(--xtn-red);\n    width:14px;\n    height:14px;\n    flex-shrink:0;\n  }\n\n  .xtn-article-p{\n    font-size:15px;\n    line-height:1.7;\n    color:var(--xtn-ink);\n    margin:0 0 18px;\n  }\n  .xtn-article-p-last{margin-bottom:0;}\n\n  .xtn-article a{\n    color:var(--xtn-red);\n    text-decoration:none;\n  }\n  .xtn-article a:hover{\n    text-decoration:underline;\n  }\n\n  @media (max-width:479px){\n    .xtn-article-h{font-size:17px;margin:26px 0 12px;}\n    .xtn-article-intro,\n    .xtn-article-p{font-size:14px;}\n  }\n<\/style>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1382d537 elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"1382d537\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">SAP Security in the Cloud and in hybrid Landscapes <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-522f84a3 elementor-widget elementor-widget-text-editor\" data-id=\"522f84a3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"auto\">As SAP systems move to the cloud, security\u00a0responsibilitiesshifts. Cloud models follow the shared responsibility model: SAP secures the infrastructure and platform, while the customer\u00a0remains\u00a0responsible for aspects such as\u00a0authorizations\u00a0and compliance.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">In practice, this quickly leads to misjudgments. We see many organizations assume that the cloud\u00a0is automatically\u00a0more secure.\u00a0In fact, the\u00a0risks simply shift. On top of that, most landscapes today are built as hybrid environments. This creates\u00a0additional\u00a0challenges in\u00a0identity management, authorization control, and compliance checks.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2b21d42 elementor-widget elementor-widget-button\" data-id=\"2b21d42\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/xiting.com\/en\/identity-and-access-management\/btp-security-id-lifecycle-management\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-arrow-right\"><\/i>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Build a secure Cloud Landscape with Xiting<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f8fdecc elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"f8fdecc\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Current Threat Landscape and Compliance Requirements in 2026 <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-387dfdb elementor-widget elementor-widget-text-editor\" data-id=\"387dfdb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span class=\"TextRun SCXW21018530 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun CommentHighlightClicked SCXW21018530 BCX8\" data-ccp-parastyle=\"Normal\">Typical SAP vulnerabilities include system misconfigurations, overly privileged users, insecure interfaces, insufficiently reviewed custom code, and new risks introduced by integrations and extensions.<\/span><span class=\"NormalTextRun CommentHighlightPipeClicked SCXW21018530 BCX8\" data-ccp-parastyle=\"Normal\">\u00a0<\/span><span class=\"NormalTextRun SCXW21018530 BCX8\" data-ccp-parastyle=\"Normal\">Many of these risks stem from structural weaknesses in system landscapes that have grown organically over time.<\/span><\/span><span class=\"EOP Selected SCXW21018530 BCX8\" data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-52a7653 e-con-full e-flex e-con e-child\" data-id=\"52a7653\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2ca4ee8 elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"2ca4ee8\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Regulatory Framework <\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8f0f1f8 elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"8f0f1f8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-exclamation-circle\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">SAP Security is closely tied to regulatory requirements. As an organization, you not only need to secure your systems, but also document that in a traceable way. Important frameworks include GDPR\/CCPA and NIST CSF, as well as industry-specific requirements such as SOX (Sarbanes-Oxley Act, financial reporting controls for public companies) or CISA critical-infrastructure regulations (protecting sectors such as energy or healthcare). <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d442182 elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"d442182\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">SAP Security Tools \u2013 an Overview <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-59a974d elementor-widget elementor-widget-text-editor\" data-id=\"59a974d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"auto\">SAP Security is supported by various tools that cover different areas of responsibility,\u00a0including\u00a0identity\u00a0management, monitoring, data protection, and\u00a0<\/span><a href=\"https:\/\/xiting.com\/en\/sap-knowledge\/governance-risk-compliance-in-sap\/\"><span data-contrast=\"none\">Governance, Risk &amp; Compliance<\/span><\/a><span data-contrast=\"auto\">.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p><p><strong>SAP provides its own solutions for this:\u00a0<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a70fe1e elementor-widget elementor-widget-html\" data-id=\"a70fe1e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<section class=\"xtn-table-section\">\r\n\r\n<div class=\"xtn-table-wrap\">\r\n<table class=\"xtn-table\">\r\n<thead>\r\n<tr>\r\n<th>Category<\/th>\r\n<th>Focus<\/th>\r\n<th>Typical SAP Tools<\/th>\r\n<\/tr>\r\n<\/thead>\r\n<tbody>\r\n<tr>\r\n<td class=\"xtn-td-label\" data-label=\"Category\">Identity &amp; Access Management<\/td>\r\n<td data-label=\"Focus\">Managing identities, authentication, and access rights<\/td>\r\n<td data-label=\"Typical SAP Tools\"><a href=\"https:\/\/xiting.com\/en\/sap-knowledge\/identity-and-access-management\/cloud-identity-services\/\">SAP Cloud Identity Services<\/a>, SAP Cloud Identity Access Governance, <a href=\"https:\/\/xiting.com\/en\/identity-and-access-management\/single-sign-on\/\">SAP Single Sign-On<\/a><\/td>\r\n<\/tr>\r\n<tr>\r\n<td class=\"xtn-td-label\" data-label=\"Category\">Configuration &amp; Monitoring<\/td>\r\n<td data-label=\"Focus\">Monitoring systems and detecting anomalies and vulnerabilities<\/td>\r\n<td data-label=\"Typical SAP Tools\">SAP Enterprise Threat Detection, SAP EarlyWatch Alert, SAP Code Vulnerability Analyzer, SAP Focused Run<\/td>\r\n<\/tr>\r\n<tr>\r\n<td class=\"xtn-td-label\" data-label=\"Category\">Data Protection &amp; Confidentiality<\/td>\r\n<td data-label=\"Focus\">Protecting sensitive data and meeting data protection requirements<\/td>\r\n<td data-label=\"Typical SAP Tools\">SAP UI Data Protection, SAP Data Custodian, SAP Privacy Governance<\/td>\r\n<\/tr>\r\n<tr>\r\n<td class=\"xtn-td-label\" data-label=\"Category\">Governance, Risk &amp; Compliance (GRC)<\/td>\r\n<td data-label=\"Focus\">Managing risk, controlling processes, and supporting audits<\/td>\r\n<td data-label=\"Typical SAP Tools\">SAP Risk Management, SAP Process Control, SAP Audit Management<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n<\/div>\r\n<\/section>\r\n\r\n<style>\r\n  .xtn-table-section{\r\n    --xtn-red:#cd1316;\r\n    --xtn-ink:#33373b;\r\n    --xtn-muted:#6a6f76;\r\n    --xtn-border:#ededed;\r\n    --xtn-bg:#ffffff;\r\n    --xtn-row-alt:#f9f9fa;\r\n    font-family:\"Open Sans\",-apple-system,BlinkMacSystemFont,\"Segoe UI\",sans-serif;\r\n    background:#ffffff;\r\n    padding:40px 20px;\r\n    box-sizing:border-box;\r\n  }\r\n  .xtn-table-section *{box-sizing:border-box;}\r\n\r\n  .xtn-table-intro{\r\n    font-size:15px;\r\n    line-height:1.7;\r\n    color:var(--xtn-ink);\r\n    margin:0 0 14px;\r\n    max-width:1200px;\r\n  }\r\n  .xtn-table-intro-last{margin-bottom:24px;}\r\n\r\n  .xtn-table-wrap{\r\n    max-width:1200px;\r\n    margin:0;\r\n    border-radius:18px;\r\n    overflow:hidden;\r\n    box-shadow:0 8px 28px rgba(20,20,20,.05);\r\n    border:1px solid var(--xtn-border);\r\n  }\r\n\r\n  .xtn-table{\r\n    width:100%;\r\n    border-collapse:collapse;\r\n    background:var(--xtn-bg);\r\n  }\r\n\r\n  .xtn-table thead th{\r\n    background:var(--xtn-red);\r\n    color:#ffffff;\r\n    font-size:15px;\r\n    font-weight:700;\r\n    text-align:left;\r\n    padding:16px 22px;\r\n  }\r\n\r\n  .xtn-table tbody td{\r\n    font-size:14.5px;\r\n    line-height:1.6;\r\n    color:var(--xtn-muted);\r\n    padding:16px 22px;\r\n    border-bottom:1px solid var(--xtn-border);\r\n    vertical-align:top;\r\n    white-space:normal;\r\n  }\r\n\r\n  .xtn-table tbody tr:last-child td{\r\n    border-bottom:none;\r\n  }\r\n\r\n  .xtn-table tbody tr:nth-child(even){\r\n    background:var(--xtn-row-alt);\r\n  }\r\n\r\n  .xtn-td-label{\r\n    font-weight:700;\r\n    color:var(--xtn-ink);\r\n  }\r\n\r\n  .xtn-table tbody td a{\r\n    color:var(--xtn-red);\r\n    text-decoration:none;\r\n  }\r\n\r\n  \/* ---------- Responsive fine-tuning ---------- *\/\r\n  @media (max-width:767px){\r\n    .xtn-table-section{padding:32px 16px;}\r\n  }\r\n\r\n  \/* ---------- Mobile: table becomes stacked cards ---------- *\/\r\n  @media (max-width:600px){\r\n    .xtn-table-wrap{overflow-x:visible;border:none;box-shadow:none;border-radius:0;}\r\n    .xtn-table{min-width:0;display:block;}\r\n    .xtn-table thead{display:none;}\r\n    .xtn-table tbody{display:block;}\r\n    .xtn-table tbody tr{\r\n      display:block;\r\n      margin-bottom:16px;\r\n      border:1px solid var(--xtn-border);\r\n      border-radius:14px;\r\n      overflow:hidden;\r\n      box-shadow:0 6px 20px rgba(20,20,20,.05);\r\n    }\r\n    .xtn-table tbody tr:nth-child(even){background:var(--xtn-bg);}\r\n    .xtn-table tbody td{\r\n      display:block;\r\n      width:100%;\r\n      padding:12px 16px;\r\n      border-bottom:1px solid var(--xtn-border);\r\n      white-space:normal;\r\n    }\r\n    .xtn-table tbody tr:last-child td:last-child,\r\n    .xtn-table tbody td:last-child{border-bottom:none;}\r\n    .xtn-table tbody td.xtn-td-label{\r\n      background:var(--xtn-red);\r\n      color:#ffffff;\r\n      font-size:15px;\r\n    }\r\n    .xtn-table tbody td:not(.xtn-td-label)::before{\r\n      content:attr(data-label);\r\n      display:block;\r\n      font-size:11px;\r\n      font-weight:700;\r\n      text-transform:uppercase;\r\n      letter-spacing:.03em;\r\n      color:var(--xtn-red);\r\n      margin-bottom:4px;\r\n    }\r\n  }\r\n<\/style>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-fab6c4b e-con-full e-flex e-con e-child\" data-id=\"fab6c4b\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-37e002c elementor-widget elementor-widget-text-editor\" data-id=\"37e002c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>Note: <\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ebc7f87 elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"ebc7f87\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-exclamation-circle\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Tools alone don't solve security problems. They create transparency and support processes, but real effectiveness only comes from a well-thought-out concept and solid expertise. <\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5ace421 elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"5ace421\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">How to Approach SAP Security strategically: 5 Recommendations <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-10f957f9 elementor-widget elementor-widget-text-editor\" data-id=\"10f957f9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<section class=\"xtn-section\">\n<div class=\"xtn-grid\">\n<div class=\"xtn-card\">\n<div class=\"xtn-number\">1<\/div>\n<h3 class=\"xtn-name\">Conduct an Inventory<\/h3>\n<p class=\"xtn-text xtn-text-last\">An SAP Security Check or audit creates transparency and highlights priority areas for action.<\/p>\n<\/div>\n<div class=\"xtn-card\">\n<div class=\"xtn-number\">2<\/div>\n<h3 class=\"xtn-name\">Clean Up Authorizations<\/h3>\n<p class=\"xtn-text xtn-text-last\">Roles that have grown organically over time need to be reviewed and consistently pared down.<\/p>\n<\/div>\n<div class=\"xtn-card\">\n<div class=\"xtn-number\">3<\/div>\n<h3 class=\"xtn-name\">Establish Monitoring<\/h3>\n<p class=\"xtn-text xtn-text-last\">Security-relevant events should be monitored and analyzed in a structured way.<\/p>\n<\/div>\n<div class=\"xtn-break\"><\/div>\n<div class=\"xtn-card\">\n<div class=\"xtn-number\">4<\/div>\n<h3 class=\"xtn-name\">Structure Patch Management<\/h3>\n<p class=\"xtn-text xtn-text-last\">Critical vulnerabilities need to be closed promptly.<\/p>\n<\/div>\n<div class=\"xtn-card\">\n<div class=\"xtn-number\">5<\/div>\n<h3 class=\"xtn-name\">Strengthen Security Awareness<\/h3>\n<p class=\"xtn-text xtn-text-last\">Beyond technology, training and awareness are essential.<\/p>\n<\/div>\n<\/div>\n<\/section>\n\n<style>\n  .xtn-section{\n    --xtn-red:#cd1316;\n    --xtn-ink:#33373b;\n    --xtn-muted:#6a6f76;\n    --xtn-border:#ededed;\n    --xtn-bg:#ffffff;\n    font-family:\"Open Sans\",-apple-system,BlinkMacSystemFont,\"Segoe UI\",sans-serif;\n    background:#ffffff;\n    padding:40px 20px;\n    box-sizing:border-box;\n  }\n  .xtn-section *{box-sizing:border-box;}\n\n  \/* Grid \u2013 Flexbox: adapts to the width *\/\n  .xtn-grid{\n    display:flex;\n    flex-wrap:wrap;\n    justify-content:flex-start;\n    gap:26px;\n  }\n\n  \/* Card *\/\n  .xtn-card{\n    flex:1 1 280px;\n    max-width:320px;\n    display:flex;flex-direction:column;\n    background:var(--xtn-bg);\n    border:1px solid var(--xtn-border);\n    border-radius:18px;\n    padding:30px 24px;\n    box-shadow:0 8px 28px rgba(20,20,20,.05);\n    transition:transform .25s ease, box-shadow .25s ease;\n    position:relative;\n    overflow:hidden;\n  }\n  .xtn-card::before{\n    content:\"\";position:absolute;top:0;left:0;right:0;height:3px;\n    background:var(--xtn-red);transform:scaleX(0);transform-origin:left;\n    transition:transform .25s ease;\n  }\n  .xtn-card:hover{\n    transform:translateY(-6px);\n    box-shadow:0 20px 46px rgba(20,20,20,.11);\n  }\n  .xtn-card:hover::before{transform:scaleX(1);}\n\n  .xtn-break{\n    flex-basis:100%;\n    width:0;\n    height:0;\n    margin:0;\n    padding:0;\n  }\n\n  \/* Number badge *\/\n  .xtn-number{\n    width:44px;height:44px;\n    display:flex;align-items:center;justify-content:center;\n    background:var(--xtn-red);\n    color:#ffffff;\n    font-size:18px;font-weight:700;\n    border-radius:50%;\n    margin-bottom:20px;\n  }\n\n  \/* Heading *\/\n  .xtn-name{\n    font-size:18px;line-height:1.3;font-weight:700;color:var(--xtn-ink);\n    margin:0 0 10px;\n  }\n\n  \/* Text *\/\n  .xtn-text{\n    font-size:14.5px;line-height:1.65;color:var(--xtn-muted);\n    margin:0 0 14px;\n  }\n  .xtn-text-last{margin-bottom:0;}\n\n  .xtn-card a{\n    color:var(--xtn-red);\n    text-decoration:none;\n  }\n  .xtn-card a:hover{\n    text-decoration:underline;\n  }\n\n  \/* ---------- Responsive fine-tuning ---------- *\/\n  @media (max-width:900px){\n    .xtn-break{display:none;}\n  }\n  @media (max-width:767px){\n    .xtn-section{padding:32px 16px;}\n    .xtn-grid{gap:16px;}\n  }\n  @media (max-width:479px){\n    .xtn-section{padding:28px 14px;}\n    .xtn-grid{gap:14px;}\n    .xtn-card{flex-basis:100%;max-width:none;padding:26px 22px;}\n    .xtn-name{font-size:17px;}\n  }\n<\/style>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-171ba0e elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"171ba0e\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Implementing SAP Security with Xiting <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7d1b672 elementor-widget elementor-widget-text-editor\" data-id=\"7d1b672\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong><span class=\"TextRun SCXW11714617 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW11714617 BCX8\" data-ccp-parastyle=\"Normal\">With\u00a0<\/span><span class=\"NormalTextRun SCXW11714617 BCX8\" data-ccp-parastyle=\"Normal\">Xiting<\/span><span class=\"NormalTextRun SCXW11714617 BCX8\" data-ccp-parastyle=\"Normal\">\u00a0at your side, you get a clean security concept across your entire SAP landscape:<\/span><\/span><span class=\"EOP Selected SCXW11714617 BCX8\" data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5ab1e9b elementor-widget elementor-widget-html\" data-id=\"5ab1e9b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"xtp-block\">\r\n\r\n<h3 class=\"xtp-h\">Xiting Authorizations Management Suite (XAMS)<\/h3>\r\n<p class=\"xtp-p\">With the <a href=\"https:\/\/xiting.com\/en\/xiting-authorizations-management-suite\/\">Xiting Authorizations Management Suite (XAMS)<\/a>, you can build, analyze, and continuously optimize authorization concepts in a structured way. Organizations use it to reduce complexity in role landscapes that have grown organically over time and lay the foundation for audit-ready authorization structures.<\/p>\r\n<p class=\"xtp-p\">Especially in transformation projects \u2013 such as migrating to <a href=\"https:\/\/xiting.com\/en\/sap-knowledge\/sap-s4hana\/\">SAP S\/4HANA<\/a> \u2013 XAMS helps you systematically analyze existing authorizations and redesign them with a clear target in mind.<\/p>\r\n\r\n<a class=\"xtp-mini\" href=\"https:\/\/xiting.com\/en\/xiting-authorizations-management-suite\/\">\r\n  <span class=\"xtp-mini-logo xtp-mini-logo--xams\">\r\n    <img decoding=\"async\" src=\"https:\/\/xiting.com\/wp-content\/uploads\/2024\/08\/xams-cycle_red_with-text_cmyk.png\" alt=\"Xiting Authorizations Management Suite (XAMS)\" loading=\"lazy\">\r\n  <\/span>\r\n  <span class=\"xtp-mini-btn\">Learn more<span class=\"xtp-mini-arrow\">&rarr;<\/span><\/span>\r\n<\/a>\r\n\r\n<h3 class=\"xtp-h\">Xiting Security Platform (XSP)<\/h3>\r\n<p class=\"xtp-p\">The <a href=\"https:\/\/xiting.com\/en\/xiting-security-platform\/\">Xiting Security Platform (XSP)<\/a> gives you a holistic view of security risks across system boundaries. It combines risk analysis, SoD checks, and security monitoring in a single, central approach.<\/p>\r\n<p class=\"xtp-p\">This lets you identify risks not just within a single system, but also assess and monitor them consistently across hybrid landscapes. The platform is also set to be extended with a central IAM component going forward.<\/p>\r\n\r\n<a class=\"xtp-mini\" href=\"https:\/\/xiting.com\/en\/xiting-security-platform\/\">\r\n  <span class=\"xtp-mini-logo\">\r\n    <img decoding=\"async\" src=\"https:\/\/xiting.com\/wp-content\/uploads\/2025\/01\/xsp_with-text_cmyk.png\" alt=\"Xiting Security Platform (XSP)\" loading=\"lazy\">\r\n  <\/span>\r\n  <span class=\"xtp-mini-btn\">Learn more<span class=\"xtp-mini-arrow\">&rarr;<\/span><\/span>\r\n<\/a>\r\n\r\n<h3 class=\"xtp-h\">Xiting Central Workflows (XCW)<\/h3>\r\n<p class=\"xtp-p\">With <a href=\"https:\/\/xiting.com\/en\/xiting-central-workflows\/\">Xiting Central Workflows (XCW)<\/a>, Xiting specifically addresses the operational side of identity management in ABAP systems. XCW enables centralized user provisioning and automated approval processes across ABAP systems.<\/p>\r\n\r\n<a class=\"xtp-mini\" href=\"https:\/\/xiting.com\/en\/xiting-central-workflows\/\">\r\n  <span class=\"xtp-mini-logo\">\r\n    <img decoding=\"async\" src=\"https:\/\/xiting.com\/wp-content\/uploads\/2025\/01\/xcw-rgb-1.png\" alt=\"Xiting Central Workflows (XCW)\" loading=\"lazy\">\r\n  <\/span>\r\n  <span class=\"xtp-mini-btn\">Learn more<span class=\"xtp-mini-arrow\">&rarr;<\/span><\/span>\r\n<\/a>\r\n\r\n<h3 class=\"xtp-h\">Xiting Falcora<\/h3>\r\n<p class=\"xtp-p\">With <a href=\"https:\/\/xiting.com\/en\/falcora\/\">Xiting Falcora<\/a>, you get a specialized, AI-powered SOC and SOAR solution built specifically for SAP security operations. Falcora doesn't replace your existing SIEM \u2013 it complements it with the critical SAP context that classic security tools can't provide.<\/p>\r\n<p class=\"xtp-p\">Through AI-powered prioritization and a human-in-the-loop model, Falcora speeds up threat detection and response, while the final decision always stays with your analysts. This can reduce the operational effort involved in SAP investigations by up to 70 percent.<\/p>\r\n\r\n<a class=\"xtp-mini\" href=\"https:\/\/xiting.com\/en\/falcora\/\">\r\n  <span class=\"xtp-mini-logo\">\r\n    <img decoding=\"async\" src=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/06\/falcora_with-text_rgb_color.png\" alt=\"Xiting Falcora\" loading=\"lazy\">\r\n  <\/span>\r\n  <span class=\"xtp-mini-btn\">Learn more<span class=\"xtp-mini-arrow\">&rarr;<\/span><\/span>\r\n<\/a>\r\n\r\n<h3 class=\"xtp-h\">Xiting Lynera<\/h3>\r\n<p class=\"xtp-p\"><a href=\"https:\/\/xiting.com\/en\/lynera\/\">Xiting Lynera<\/a> is the new content portal for compliance-ready SAP access governance. As a central SaaS platform, Lynera helps you define, manage, and maintain SAP rulesets, risks, and business functions all in one place.<\/p>\r\n<p class=\"xtp-p\">Thanks to AI-powered analysis and ready-made best-practice content for SOX, GxP, and GDPR\/CCPA, your rulesets stay current and reliable. Through its \"any solution, any format\" approach, Lynera integrates seamlessly with existing GRC and IAM solutions such as XAMS, XSP, or SAP Access Control.<\/p>\r\n\r\n<a class=\"xtp-mini\" href=\"https:\/\/xiting.com\/en\/lynera\/\">\r\n  <span class=\"xtp-mini-logo\">\r\n    <img decoding=\"async\" src=\"https:\/\/xiting.com\/wp-content\/uploads\/2026\/06\/lynera_with-text_rgb_color.png\" alt=\"Xiting Lynera\" loading=\"lazy\">\r\n  <\/span>\r\n  <span class=\"xtp-mini-btn\">Learn more<span class=\"xtp-mini-arrow\">&rarr;<\/span><\/span>\r\n<\/a>\r\n<style>\r\n  .xtp-block{\r\n    --xtp-red:#cd1316;\r\n    --xtp-ink:#000000;\r\n    --xtp-border:#ededed;\r\n    font-family:\"Open Sans\",-apple-system,BlinkMacSystemFont,\"Segoe UI\",sans-serif;\r\n    box-sizing:border-box;\r\n  }\r\n  .xtp-block *{box-sizing:border-box;}\r\n\r\n  .xtp-h{\r\n    font-size:20px;\r\n    line-height:1.3;\r\n    font-weight:700;\r\n    color:var(--xtp-ink);\r\n    margin:64px 0 12px;\r\n  }\r\n  .xtp-h:first-child{margin-top:0;}\r\n\r\n  .xtp-p{\r\n    font-size:15px;\r\n    line-height:1.65;\r\n    color:var(--xtp-ink);\r\n    margin:0 0 14px;\r\n  }\r\n\r\n  .xtp-block a{\r\n    color:var(--xtp-red);\r\n    text-decoration:none;\r\n  }\r\n  .xtp-block a:hover{\r\n    text-decoration:underline;\r\n  }\r\n\r\n  \/* Mini product element: logo + button *\/\r\n  .xtp-mini{\r\n    display:flex;\r\n    align-items:center;\r\n    gap:44px;\r\n    max-width:100%;\r\n    width:100%;\r\n    background:#ffffff;\r\n    border:1px solid var(--xtp-border);\r\n    border-radius:14px;\r\n    padding:14px 18px;\r\n    margin:0 0 60px;\r\n    text-decoration:none !important;\r\n    box-shadow:0 6px 20px rgba(20,20,20,.05);\r\n    transition:transform .2s ease, box-shadow .2s ease;\r\n  }\r\n  .xtp-mini,\r\n  .xtp-mini:hover,\r\n  .xtp-mini:visited,\r\n  .xtp-mini:active{\r\n    text-decoration:none !important;\r\n  }\r\n  .xtp-mini:hover{\r\n    transform:translateY(-3px);\r\n    box-shadow:0 14px 32px rgba(20,20,20,.1);\r\n  }\r\n\r\n  .xtp-mini-logo{\r\n    display:flex;align-items:center;justify-content:center;\r\n    height:70px;\r\n    flex-shrink:0;\r\n  }\r\n  .xtp-mini-logo img{max-height:100%;max-width:160px;width:auto;object-fit:contain;}\r\n\r\n  .xtp-mini-logo--xams{height:90px;}\r\n\r\n  .xtp-mini-btn,\r\n  .xtp-mini-btn:hover,\r\n  .xtp-mini-btn:visited{\r\n    display:inline-flex;align-items:center;gap:7px;\r\n    font-size:14px;font-weight:700;color:var(--xtp-red);\r\n    text-decoration:none !important;\r\n    white-space:nowrap;\r\n  }\r\n  .xtp-mini-arrow{\r\n    transition:transform .2s ease;\r\n    display:inline-block;\r\n    text-decoration:none !important;\r\n  }\r\n  .xtp-mini:hover .xtp-mini-arrow{transform:translateX(4px);}\r\n\r\n  \/* CTA button (request demo) *\/\r\n  .xtp-cta-btn{\r\n    display:inline-flex;align-items:center;gap:10px;\r\n    background:var(--xtp-red);\r\n    color:#ffffff;\r\n    font-size:15px;font-weight:700;\r\n    padding:13px 26px 13px 10px;\r\n    border-radius:999px;\r\n    text-decoration:none;\r\n    box-shadow:0 8px 22px rgba(205,19,22,.25);\r\n    transition:transform .2s ease, box-shadow .2s ease;\r\n  }\r\n  .xtp-cta-btn:hover{\r\n    transform:translateY(-2px);\r\n    box-shadow:0 14px 30px rgba(205,19,22,.32);\r\n    text-decoration:none;\r\n  }\r\n  .xtp-cta-icon{\r\n    display:flex;align-items:center;justify-content:center;\r\n    width:30px;height:30px;\r\n    border-radius:50%;\r\n    background:rgba(255,255,255,.18);\r\n    font-size:14px;font-weight:700;\r\n    flex-shrink:0;\r\n  }\r\n\r\n  @media (max-width:479px){\r\n    .xtp-h{font-size:18px;}\r\n    .xtp-mini{flex-wrap:wrap;gap:16px;padding:12px 16px;}\r\n    .xtp-mini-logo{height:50px;}\r\n    .xtp-mini-logo--xams{height:64px;}\r\n    .xtp-cta-btn{width:100%;justify-content:center;}\r\n  }\r\n<\/style>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-764d956 elementor-widget elementor-widget-text-editor\" data-id=\"764d956\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3 class=\"xtp-h\">Consulting, SAP Security Check, and Training\u00a0<\/h3><p><span data-contrast=\"auto\">Xiting\u00a0supports organizations from the initial assessment all the way through to the long-term implementation of security strategies. Get in touch with us today, free of charge and without obligation, and let&#8217;s secure your SAP landscape together for the long run!<\/span><span data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b8f99e0 elementor-align-left elementor-widget__width-initial elementor-widget elementor-widget-button\" data-id=\"b8f99e0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-md\" href=\"https:\/\/xiting.com\/en\/request-demo\/\" target=\"_blank\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-angle-double-right\"><\/i>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Request a free Demo now!<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-312d292f elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"312d292f\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">FAQ<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-752fcd19 elementor-widget elementor-widget-n-accordion\" data-id=\"752fcd19\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;max_items_expended&quot;:&quot;multiple&quot;,&quot;default_state&quot;:&quot;expanded&quot;,&quot;n_accordion_animation_duration&quot;:{&quot;unit&quot;:&quot;ms&quot;,&quot;size&quot;:400,&quot;sizes&quot;:[]}}\" data-widget_type=\"nested-accordion.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"e-n-accordion\" aria-label=\"Accordion. Open links with Enter or Space, close with Escape, and navigate with Arrow Keys\">\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-1960\" class=\"e-n-accordion-item\" open>\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"1\" tabindex=\"0\" aria-expanded=\"true\" aria-controls=\"e-n-accordion-item-1960\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h3 class=\"e-n-accordion-item-title-text\"> What is SAP Security? <\/h3><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-angle-up\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-angle-right\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-1960\" class=\"elementor-element elementor-element-209abbe6 e-con-full e-flex e-con e-child\" data-id=\"209abbe6\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-95bacac elementor-widget elementor-widget-text-editor\" data-id=\"95bacac\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\">\n<div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\">\n<div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\">\n<div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\">\n<div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\">\n<div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\">\n<div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\">\n<div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\">\n<div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\">\n<div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\">\n<p><span class=\"TextRun SCXW146764998 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW146764998 BCX8\" data-ccp-parastyle=\"Normal\">SAP Security describes the overall concept for securing an SAP landscape and covers all the technical, organizational, and procedural measures involved.<\/span><\/span><span class=\"EOP Selected SCXW146764998 BCX8\" data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p>\n<\/div>\n<p><\/div>\n<p><\/div>\n<p><\/div>\n<p><\/div>\n<p><\/div>\n<p><\/div>\n<p><\/div>\n<p><\/div>\n<p><\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-1961\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"2\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-1961\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h3 class=\"e-n-accordion-item-title-text\"> Which Regulatory Requirements apply to SAP Systems?  <\/h3><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-angle-up\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-angle-right\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-1961\" class=\"elementor-element elementor-element-2c69cc9c e-con-full e-flex e-con e-child\" data-id=\"2c69cc9c\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-7893ec96 elementor-widget elementor-widget-text-editor\" data-id=\"7893ec96\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><p><span class=\"TextRun SCXW134521308 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW134521308 BCX8\" data-ccp-parastyle=\"Normal\">Relevant frameworks include GDPR\/CCPA, NIST CSF, and industry-specific requirements such as SOX or CISA critical-infrastructure regulations. Depending on your industry and business model, different requirements may be critical for you.<\/span><\/span><span class=\"EOP Selected SCXW134521308 BCX8\" data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-1962\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"3\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-1962\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h3 class=\"e-n-accordion-item-title-text\"> Where do I start with SAP Security?  <\/h3><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-angle-up\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-angle-right\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-1962\" class=\"elementor-element elementor-element-40f4a0cf e-con-full e-flex e-con e-child\" data-id=\"40f4a0cf\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5dd2a6e2 elementor-widget elementor-widget-text-editor\" data-id=\"5dd2a6e2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><div class=\"x_elementToProof\" data-olk-copy-source=\"MessageBody\"><p><span class=\"TextRun SCXW99544945 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW99544945 BCX8\" data-ccp-parastyle=\"Normal\">A good starting point for improving your SAP security is a structured assessment through an SAP Security Check or audit. Request a free demo with\u00a0<\/span><span class=\"NormalTextRun SCXW99544945 BCX8\" data-ccp-parastyle=\"Normal\">Xiting<\/span><span class=\"NormalTextRun SCXW99544945 BCX8\" data-ccp-parastyle=\"Normal\">\u00a0and find out exactly where your security concept currently stands.<\/span><\/span><span class=\"EOP Selected SCXW99544945 BCX8\" data-ccp-props=\"{&quot;335559739&quot;:160}\">\u00a0<\/span><\/p><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t<script type=\"application\/ld+json\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@type\":\"FAQPage\",\"mainEntity\":[{\"@type\":\"Question\",\"name\":\"What is SAP Security?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"SAP Security describes the overall concept for securing an SAP landscape and covers all the technical, organizational, and procedural measures involved.\\u00a0\"}},{\"@type\":\"Question\",\"name\":\"Which Regulatory Requirements apply to SAP Systems?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Relevant frameworks include GDPR\\\/CCPA, NIST CSF, and industry-specific requirements such as SOX or CISA critical-infrastructure regulations. Depending on your industry and business model, different requirements may be critical for you.\\u00a0\"}},{\"@type\":\"Question\",\"name\":\"Where do I start with SAP Security?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"A good starting point for improving your SAP security is a structured assessment through an SAP Security Check or audit. Request a free demo with\\u00a0Xiting\\u00a0and find out exactly where your security concept currently stands.\\u00a0\"}}]}<\/script>\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-c31ddc5 elementor-section-stretched elementor-section-height-min-height elementor-section-boxed elementor-section-height-default elementor-section-items-middle\" data-id=\"c31ddc5\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;stretch_section&quot;:&quot;section-stretched&quot;,&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-1254bb1d\" data-id=\"1254bb1d\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-626552f7 elementor-widget elementor-widget-heading\" data-id=\"626552f7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Stay up to date.<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-13472df6 elementor-widget elementor-widget-heading\" data-id=\"13472df6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Sign up for the newsletter to receive more information.<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4b8c4e26 elementor-align-center elementor-widget elementor-widget-button\" data-id=\"4b8c4e26\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm elementor-animation-grow\" href=\"https:\/\/xiting.com\/en\/subscribe-to-our-newsletter\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Newsletter Sign-Up<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-21f70483 elementor-widget elementor-widget-heading\" data-id=\"21f70483\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Follow @Xiting and @xiting.global on social media.<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-29e5e551 e-flex e-con-boxed e-con e-parent\" data-id=\"29e5e551\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4effa862 elementor-view-default elementor-widget elementor-widget-icon\" data-id=\"4effa862\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-icon-wrapper\">\n\t\t\t<a class=\"elementor-icon\" href=\"https:\/\/twitter.com\/XitingIT\">\n\t\t\t<i aria-hidden=\"true\" class=\"fab fa-x-twitter\"><\/i>\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4b2ee016 elementor-view-default elementor-widget elementor-widget-icon\" data-id=\"4b2ee016\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-icon-wrapper\">\n\t\t\t<a class=\"elementor-icon\" href=\"https:\/\/www.linkedin.com\/company\/xiting\/\">\n\t\t\t<i aria-hidden=\"true\" class=\"fab fa-linkedin-in\"><\/i>\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c99ee48 elementor-view-default elementor-widget elementor-widget-icon\" data-id=\"c99ee48\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-icon-wrapper\">\n\t\t\t<a class=\"elementor-icon\" href=\"https:\/\/www.instagram.com\/xiting.global\/\">\n\t\t\t<i aria-hidden=\"true\" class=\"fab fa-instagram\"><\/i>\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t<div class=\"elementor-element elementor-element-ae221e4 e-flex e-con-boxed e-con e-parent\" data-id=\"ae221e4\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-46c8b504 e-con-full e-flex e-con e-child\" data-id=\"46c8b504\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Learn how to protect your SAP landscape with a structured SAP Security strategy \u2013 authorizations, IAM, monitoring, and compliance. Read now!<\/p>\n","protected":false},"author":61,"featured_media":16057,"parent":0,"menu_order":0,"template":"elementor_header_footer","sap-knowledge-category":[1868],"class_list":["post-66929","sap-knowledge","type-sap-knowledge","status-publish","has-post-thumbnail","hentry","sap-knowledge-category-sap-security"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.2 (Yoast SEO v28.2) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>SAP Security: How to protect your SAP Landscape<\/title>\n<meta name=\"description\" content=\"Learn how to protect your SAP landscape with a structured SAP Security strategy \u2013 authorizations, IAM, monitoring, and compliance. Read now!\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/xiting.com\/en\/sap-knowledge\/sap-security\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SAP Security: How to protect your SAP Landscape\" \/>\n<meta property=\"og:description\" content=\"Learn how to protect your SAP landscape with a structured SAP Security strategy \u2013 authorizations, IAM, monitoring, and compliance. Read now!\" \/>\n<meta property=\"og:url\" content=\"https:\/\/xiting.com\/en\/sap-knowledge\/sap-security\/\" \/>\n<meta property=\"og:site_name\" content=\"Xiting\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/XitingAG\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-17T15:58:06+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/xiting.com\/wp-content\/uploads\/2021\/08\/shutterstock_245476081-1024x682.jpg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"SAP Security: How to protect your SAP Landscape\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"10 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/sap-knowledge\\\/sap-security\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/sap-knowledge\\\/sap-security\\\/\"},\"author\":{\"name\":\"Vanessa Albuera\",\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#\\\/schema\\\/person\\\/0ce290e03b1c66c532a6968ad9af1dcd\"},\"headline\":\"SAP Security: How to protect your SAP Landscape\",\"datePublished\":\"2026-08-07T09:30:58+00:00\",\"dateModified\":\"2026-08-17T15:58:06+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/sap-knowledge\\\/sap-security\\\/\"},\"wordCount\":1938,\"publisher\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/sap-knowledge\\\/sap-security\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/xiting.com\\\/wp-content\\\/uploads\\\/2021\\\/08\\\/shutterstock_245476081.jpg\",\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/sap-knowledge\\\/sap-security\\\/\",\"url\":\"https:\\\/\\\/xiting.com\\\/en\\\/sap-knowledge\\\/sap-security\\\/\",\"name\":\"SAP Security: How to protect your SAP Landscape\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/sap-knowledge\\\/sap-security\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/sap-knowledge\\\/sap-security\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/xiting.com\\\/wp-content\\\/uploads\\\/2021\\\/08\\\/shutterstock_245476081.jpg\",\"datePublished\":\"2026-08-07T09:30:58+00:00\",\"dateModified\":\"2026-08-17T15:58:06+00:00\",\"description\":\"Learn how to protect your SAP landscape with a structured SAP Security strategy \u2013 authorizations, IAM, monitoring, and compliance. Read now!\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/sap-knowledge\\\/sap-security\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/xiting.com\\\/en\\\/sap-knowledge\\\/sap-security\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/sap-knowledge\\\/sap-security\\\/#primaryimage\",\"url\":\"https:\\\/\\\/xiting.com\\\/wp-content\\\/uploads\\\/2021\\\/08\\\/shutterstock_245476081.jpg\",\"contentUrl\":\"https:\\\/\\\/xiting.com\\\/wp-content\\\/uploads\\\/2021\\\/08\\\/shutterstock_245476081.jpg\",\"width\":1800,\"height\":1199,\"caption\":\"Moderne Glas-Hochh\u00e4user aus der Froschperspektive bei Sonnenschein\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/sap-knowledge\\\/sap-security\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/xiting.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SAP Security: How to protect your SAP Landscape\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/xiting.com\\\/en\\\/\",\"name\":\"Xiting\",\"description\":\"Your Expert for SAP Security\",\"publisher\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/xiting.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#organization\",\"name\":\"Xiting\",\"url\":\"https:\\\/\\\/xiting.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/xiting.com\\\/wp-content\\\/uploads\\\/2025\\\/08\\\/xiting-logo.png\",\"contentUrl\":\"https:\\\/\\\/xiting.com\\\/wp-content\\\/uploads\\\/2025\\\/08\\\/xiting-logo.png\",\"width\":960,\"height\":504,\"caption\":\"Xiting\"},\"image\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/XitingAG\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/1345129\\\/\",\"https:\\\/\\\/www.instagram.com\\\/xiting.global\\\/\",\"https:\\\/\\\/www.crunchbase.com\\\/organization\\\/xiting\",\"https:\\\/\\\/www.youtube.com\\\/@Xiting\"],\"description\":\"Xiting wurde 2008 von erfahrenen SAP-Beratern in der Schweiz gegr\u00fcndet. Heute besch\u00e4ftigt das Unternehmen 140 Mitarbeitende an mehreren Standorten weltweit. Die SAP Security Consultants von Xiting bringen tiefes Fachwissen aus der Projektpraxis mit und betreuen \u00fcber 700 nationale und internationale Kunden \u2013 remote und vor Ort.\",\"email\":\"info@xiting.ch\",\"telephone\":\"+41 43422 8803\",\"legalName\":\"Xiting AG\",\"foundingDate\":\"2008-06-01\",\"numberOfEmployees\":{\"@type\":\"QuantitativeValue\",\"minValue\":\"51\",\"maxValue\":\"200\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#\\\/schema\\\/person\\\/0ce290e03b1c66c532a6968ad9af1dcd\",\"name\":\"Vanessa Albuera\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f26710651f167cd0cea46b148e690f7299dcbc66aa066d61d17ab3ccdf1398d5?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f26710651f167cd0cea46b148e690f7299dcbc66aa066d61d17ab3ccdf1398d5?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f26710651f167cd0cea46b148e690f7299dcbc66aa066d61d17ab3ccdf1398d5?s=96&d=mm&r=g\",\"caption\":\"Vanessa Albuera\"},\"description\":\"Vanessa Albuera has been working as a SAP Security Consultant and SAP Trainer for Xiting in Germany since 2015. Specialized in topics related to ERP authorizations redesign, SAP S\\\/4HANA migration and SAP Fiori authorizations, she leads different Xiting clients through their projects.\",\"url\":\"https:\\\/\\\/xiting.com\\\/en\\\/author\\\/valbuera\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"SAP Security: How to protect your SAP Landscape","description":"Learn how to protect your SAP landscape with a structured SAP Security strategy \u2013 authorizations, IAM, monitoring, and compliance. Read now!","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-security\/","og_locale":"en_US","og_type":"article","og_title":"SAP Security: How to protect your SAP Landscape","og_description":"Learn how to protect your SAP landscape with a structured SAP Security strategy \u2013 authorizations, IAM, monitoring, and compliance. Read now!","og_url":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-security\/","og_site_name":"Xiting","article_publisher":"https:\/\/www.facebook.com\/XitingAG","article_modified_time":"2026-08-17T15:58:06+00:00","og_image":[{"url":"https:\/\/xiting.com\/wp-content\/uploads\/2021\/08\/shutterstock_245476081-1024x682.jpg","type":"","width":"","height":""}],"twitter_card":"summary_large_image","twitter_title":"SAP Security: How to protect your SAP Landscape","twitter_misc":{"Est. reading time":"10 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-security\/#article","isPartOf":{"@id":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-security\/"},"author":{"name":"Vanessa Albuera","@id":"https:\/\/xiting.com\/en\/#\/schema\/person\/0ce290e03b1c66c532a6968ad9af1dcd"},"headline":"SAP Security: How to protect your SAP Landscape","datePublished":"2026-08-07T09:30:58+00:00","dateModified":"2026-08-17T15:58:06+00:00","mainEntityOfPage":{"@id":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-security\/"},"wordCount":1938,"publisher":{"@id":"https:\/\/xiting.com\/en\/#organization"},"image":{"@id":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-security\/#primaryimage"},"thumbnailUrl":"https:\/\/xiting.com\/wp-content\/uploads\/2021\/08\/shutterstock_245476081.jpg","inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-security\/","url":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-security\/","name":"SAP Security: How to protect your SAP Landscape","isPartOf":{"@id":"https:\/\/xiting.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-security\/#primaryimage"},"image":{"@id":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-security\/#primaryimage"},"thumbnailUrl":"https:\/\/xiting.com\/wp-content\/uploads\/2021\/08\/shutterstock_245476081.jpg","datePublished":"2026-08-07T09:30:58+00:00","dateModified":"2026-08-17T15:58:06+00:00","description":"Learn how to protect your SAP landscape with a structured SAP Security strategy \u2013 authorizations, IAM, monitoring, and compliance. Read now!","breadcrumb":{"@id":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-security\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/xiting.com\/en\/sap-knowledge\/sap-security\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-security\/#primaryimage","url":"https:\/\/xiting.com\/wp-content\/uploads\/2021\/08\/shutterstock_245476081.jpg","contentUrl":"https:\/\/xiting.com\/wp-content\/uploads\/2021\/08\/shutterstock_245476081.jpg","width":1800,"height":1199,"caption":"Moderne Glas-Hochh\u00e4user aus der Froschperspektive bei Sonnenschein"},{"@type":"BreadcrumbList","@id":"https:\/\/xiting.com\/en\/sap-knowledge\/sap-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/xiting.com\/en\/"},{"@type":"ListItem","position":2,"name":"SAP Security: How to protect your SAP Landscape"}]},{"@type":"WebSite","@id":"https:\/\/xiting.com\/en\/#website","url":"https:\/\/xiting.com\/en\/","name":"Xiting","description":"Your Expert for SAP Security","publisher":{"@id":"https:\/\/xiting.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/xiting.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/xiting.com\/en\/#organization","name":"Xiting","url":"https:\/\/xiting.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/xiting.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/xiting.com\/wp-content\/uploads\/2025\/08\/xiting-logo.png","contentUrl":"https:\/\/xiting.com\/wp-content\/uploads\/2025\/08\/xiting-logo.png","width":960,"height":504,"caption":"Xiting"},"image":{"@id":"https:\/\/xiting.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/XitingAG","https:\/\/www.linkedin.com\/company\/1345129\/","https:\/\/www.instagram.com\/xiting.global\/","https:\/\/www.crunchbase.com\/organization\/xiting","https:\/\/www.youtube.com\/@Xiting"],"description":"Xiting wurde 2008 von erfahrenen SAP-Beratern in der Schweiz gegr\u00fcndet. Heute besch\u00e4ftigt das Unternehmen 140 Mitarbeitende an mehreren Standorten weltweit. Die SAP Security Consultants von Xiting bringen tiefes Fachwissen aus der Projektpraxis mit und betreuen \u00fcber 700 nationale und internationale Kunden \u2013 remote und vor Ort.","email":"info@xiting.ch","telephone":"+41 43422 8803","legalName":"Xiting AG","foundingDate":"2008-06-01","numberOfEmployees":{"@type":"QuantitativeValue","minValue":"51","maxValue":"200"}},{"@type":"Person","@id":"https:\/\/xiting.com\/en\/#\/schema\/person\/0ce290e03b1c66c532a6968ad9af1dcd","name":"Vanessa Albuera","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f26710651f167cd0cea46b148e690f7299dcbc66aa066d61d17ab3ccdf1398d5?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f26710651f167cd0cea46b148e690f7299dcbc66aa066d61d17ab3ccdf1398d5?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f26710651f167cd0cea46b148e690f7299dcbc66aa066d61d17ab3ccdf1398d5?s=96&d=mm&r=g","caption":"Vanessa Albuera"},"description":"Vanessa Albuera has been working as a SAP Security Consultant and SAP Trainer for Xiting in Germany since 2015. Specialized in topics related to ERP authorizations redesign, SAP S\/4HANA migration and SAP Fiori authorizations, she leads different Xiting clients through their projects.","url":"https:\/\/xiting.com\/en\/author\/valbuera\/"}]}},"_links":{"self":[{"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/sap-knowledge\/66929","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/sap-knowledge"}],"about":[{"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/types\/sap-knowledge"}],"author":[{"embeddable":true,"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/users\/61"}],"version-history":[{"count":19,"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/sap-knowledge\/66929\/revisions"}],"predecessor-version":[{"id":67225,"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/sap-knowledge\/66929\/revisions\/67225"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/media\/16057"}],"wp:attachment":[{"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/media?parent=66929"}],"wp:term":[{"taxonomy":"sap-knowledge-category","embeddable":true,"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/sap-knowledge-category?post=66929"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}