CISA Directive: Remediating Actively Exploited SAP Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued Binding Operational Directive 22-01, mandating that government departments and agencies remediate specific vulnerabilities known to be actively exploited. This directive highlights six critical SAP vulnerabilities that pose significant risks to information systems, requiring remediation to ensure landscape security. What is the CISA Known Exploited Vulnerabilities (KEV) […]
Compliance Reporting for the SAP Security Baseline
The SAP Security Baseline provides a standardized benchmark for hardening SAP ABAP, HANA, and Java systems against known vulnerabilities. By utilizing automated tools like the Cybersecurity Extension for SAP Solution Manager, organizations can conduct continuous gap assessments, eliminate manual audit processes, and generate on-demand compliance reports to ensure their SAP environment meets current security requirements. What […]
64% of ERP Systems Have Experienced Security Breaches Between 2017-19
According to an independent survey of 430 IT decision makers, 64 percent of ERP deployments have experienced security breaches in the past 24 months. The findings are published in the report ERP Security: The Reality of Business Application Protection. Most of the breaches compromised sensitive data, including sales, HR, customer, financial and intellectual property data. […]
Webinar: 10KBLAZE – Secure Your SAP Systems with CVA and SolMan
SAP Code Vulnerability Analyzer (CVA) and SAP Solution Manager together help secure SAP systems against 10KBLAZE exploits. CVA performs static code analysis to detect vulnerabilities in custom code, and Solution Manager detects vulnerabilities and threats in components such as the gateway server, message server and SAProuter. This webinar from SAP and Layer Seven Security was […]
Securing Administrative Access in SAP AS Java
Administrative access in SAP NetWeaver Application Server for Java (AS Java) is secured by granting UME administrative roles and actions, such as Manage_All, Manage_Roles and Manage_Users, only to users who need them (least privilege), and by monitoring privileged users and new privilege grants with the Cybersecurity Extension for SAP Solution Manager. Executive Summary Misuse of […]
Webinar Recording: Security Analytics with SAP Web Intelligence
This webinar replay shows how SAP Web Intelligence, running on the BusinessObjects platform, turns SAP Solution Manager data into interactive security reports. It covers vulnerabilities, missing security notes and open alerts, with charts, tables, comments for tracking remediation, and remote access. Executive Summary Web Intelligence connects directly to data sources in SAP Solution Manager and […]
Secure, Patch & Respond: Security Analytics with SAP Web Intelligence
SAP Web Intelligence lets users visualize and manage security risks in SAP systems through interactive web reports. Powered by the BusinessObjects platform, it connects directly to SAP Solution Manager data to show vulnerabilities, missing security notes and open alerts using dynamic charts, graphs and detailed tables. Executive Summary SAP Web Intelligence reports summarize SAP security […]
Coming Soon: Security Reporting with SAP Web Intelligence
SAP Web Intelligence (WebI) is a self-service reporting platform for analyzing and visualizing SAP data in a web browser. It uses BEx queries to reach security data in Business Warehouse within Solution Manager, so teams can build dynamic reports with embedded dashboards to monitor risks and track remediation. Executive Summary Layer Seven is preparing security […]
How to Comply with the DHS Recommendations for Securing SAP Systems from Cyber Attacks
SAP Solution Manager helps you comply with the DHS recommendations for securing SAP systems by covering all seven: vulnerability scanning, interface analysis, privileged-user review, indicator-of-compromise monitoring, user-behaviour monitoring, threat intelligence updates and baseline compliance monitoring, using Configuration Validation, System Recommendations, ICMon and the Monitoring and Alerting Infrastructure. Executive Summary In response to a rise in […]
SolMan-SIEM Integration for Advanced Threat Detection
SolMan-SIEM integration lets SAP Solution Manager parse and filter SAP log events, then forward only structured alerts to SIEM platforms such as Splunk. This avoids ingesting raw logs, speeds deployment and reduces the rules needed to interpret SAP event data, giving centralized monitoring and cross-platform correlation. Executive Summary SAP Solution Manager detects Indicators of Compromise […]