SAP Security Optimization Service Portfolio ensures smooth operation of your SAP solution by taking action proactively, before severe security problems occur.

Keeping the security and availability of your SAP solution high is a tremendous value to your business. Analysis will:

• decrease the risk of a system intrusion.
• ensure the confidentiality of your business data.
• ensure the authenticity of your users.
• substantially reduce the risk of costly downtime due to wrong user interaction.

This SAP Security Optimization Services Portfolio topics:

SAP enables its customers to protect their business processes through a comprehensive security portfolio turned into services. We take the security chapter of the EarlyWatch Alert as a starting point to offer detailed services mainly around the Security Optimization Service ant the Security Notes which are published on SAP Support Portal and shown in the application System Recommendations of the SAP Solution Manager.

Combining the results of these services with the existing Security Policy of the company we define the company's SAP Security Baseline. This document is then used do define Target Systems for the application Configuration Validation in the SAP Solution Manager. You can either use the cross-system BW reports of that application directly or you can pass results to another reporting infrastructure like a Management Dashboard within the SAP Solution Manager, to Business Objects, to GRC Process Control or any other reporting system.

Among others, the following sources are used within the security services:

• SAP Note 863362 - EarlyWatch Alert (EWA) report - Security chapter or same content in the SAP Support Wiki
• Change Diagnostics
• Configuration Validation
• Security Audit Log (ABAP)
• SIS264 Securing Remote Access within SAP NetWeaver AS ABAP
• Protecting SAP Applications Against Common Attacks
• Secure Configuration SAP NetWeaver Application Server ABAP
• SAP Security Recommendations: Securing Remote Function Calls (RFC)
• Governance, Risk, and Compliance — Access Control
• Governance, Risk, and Compliance — Process Control
• SAP NetWeaver Identity Management