Inactive account. Active access

Inactive account. Active access

Dormant accounts are easy to categorize as a cleanup problem. An account hasn’t been used. Someone should probably remove it. Put it on the backlog. Move on. But I think that misses the bigger question: ๐—ช๐—ต๐—ฎ๐˜ ๐—ฎ๐—ฐ๐—ฐ๐—ฒ๐˜€๐˜€ ๐—ฑ๐—ผ๐—ฒ๐˜€ ๐˜๐—ต๐—ฒ ๐—ฎ๐—ฐ๐—ฐ๐—ผ๐˜‚๐—ป๐˜ ๐˜€๐˜๐—ถ๐—น๐—น ๐—ต๐—ฎ๐˜ƒ๐—ฒ? An unused account...
Who has access to what?

Who has access to what?

Here’s a simple SAP security question: ๐—ช๐—ต๐—ผ ๐—ต๐—ฎ๐˜€ ๐—ฎ๐—ฐ๐—ฐ๐—ฒ๐˜€๐˜€ ๐˜๐—ผ ๐˜„๐—ต๐—ฎ๐˜? It sounds almost too basic. But there is a second part that makes it more interesting: ๐—–๐—ฎ๐—ป ๐˜†๐—ผ๐˜‚ ๐—ฎ๐—ป๐˜€๐˜„๐—ฒ๐—ฟ ๐—ถ๐˜ ๐—ป๐—ผ๐˜„? Not: โŒ After exporting three reportsโŒ After someone builds a spreadsheetโŒ After asking an...
The problem you know about may not be the problem

The problem you know about may not be the problem

An SAP security issue that has already been discovered is usually not the one that concerns me most. Once you know it exists, you can investigate it. You can assign someone to it. You can remediate it. You can monitor it. The more interesting question is: ๐—ช๐—ต๐—ฎ๐˜...
“Everything is under control”

“Everything is under control”

I hear this quite often when talking with SAP security teams: โ€œ๐—ช๐—ฒ ๐—ต๐—ฎ๐˜ƒ๐—ฒ ๐—ถ๐˜ ๐˜‚๐—ป๐—ฑ๐—ฒ๐—ฟ ๐—ฐ๐—ผ๐—ป๐˜๐—ฟ๐—ผ๐—น.โ€ And most of the time, I believe them. The question is what ๐˜ถ๐˜ฏ๐˜ฅ๐˜ฆ๐˜ณ ๐˜ค๐˜ฐ๐˜ฏ๐˜ต๐˜ณ๐˜ฐ๐˜ญ actually means. Can you see, right now: โœ… Who has access to sensitive activities?โœ… Which users have...
Loading...