by Cyril Hauppert | Nov 6, 2026 | Blog
A role change can look harmless. A new transaction.A new authorization object.A new assignment.A small adjustment to support a project. Then it goes live. And suddenly: ❌ Sensitive access appears❌ New SoD conflicts are introduced❌ More users are affected than...
by Cyril Hauppert | Nov 2, 2026 | Blog
This is one of the simplest ways access creep happens. Someone moves from one department to another. They receive the access required for the new job. But some of the old access stays. Nothing immediately breaks. The user continues working. And over time, their access...
by Cyril Hauppert | Oct 30, 2026 | Blog
I’ve seen SoD exercises generate enormous numbers of findings. Hundreds. Thousands. Sometimes far more. And technically, the report may be correct. But it leaves the security team with another problem: 𝗪𝗵𝗲𝗿𝗲 𝗱𝗼 𝘆𝗼𝘂 𝘀𝘁𝗮𝗿𝘁? Not every conflict carries the same...
by Cyril Hauppert | Oct 28, 2026 | Blog
I don’t believe the goal of SAP security should be to eliminate sensitive access. That wouldn’t be realistic. People need to perform critical activities. Someone has to: • Create or change master data• Approve transactions• Administer roles• Maintain...
by Cyril Hauppert | Oct 23, 2026 | Blog
A role can look perfectly reasonable on paper. The name makes sense.The assignment was approved.The user clearly needs it. And yet the real issue may be sitting much deeper inside the role. One authorization object.One activity value.One unrestricted field.One range...
Recent Comments