{"id":1686,"date":"2021-06-21T15:13:50","date_gmt":"2021-06-21T13:13:50","guid":{"rendered":"https:\/\/sast-solutions.com\/blog-en\/?p=1686"},"modified":"2021-06-22T08:50:50","modified_gmt":"2021-06-22T06:50:50","slug":"data-loss-prevention-protect-your-sensitive-data","status":"publish","type":"post","link":"https:\/\/sast-solutions.com\/blog-en\/2021\/06\/21\/data-loss-prevention-protect-your-sensitive-data\/","title":{"rendered":"Data Loss Prevention \u2013 protect your sensitive data!"},"content":{"rendered":"

\"SASTSensitive enterprise data demands special protection. In addition to company-specific protection requirements, industry-specific specifications and legal regulations must also be observed. Minimizing the risk of losing critical data from SAP systems requires a variety of coordinated measures, collectively known as \u201cdata loss prevention\u201d.<\/p>\n

<\/p>\n

\u00a0<\/strong><\/p>\n

Downloads pose a particular risk and should be monitored<\/strong><\/h2>\n

In a standard SAP ERP or SAP S\/4HANA system, particularly in production environments, users usually don\u2019t need direct table access. Key users are an exception to this, because they need to change current settings, such as the FI posting periods. SAP already provides appropriate transactions for such tasks in the standard system, enabling you to avoid granting generic access. In practice, however, we have noticed that these users receive extensive authorizations, particularly to start downloads. Downloads present a potentially critical risk in general and should therefore be logged in the SAP system. The criticality of downloads is enterprise-specific and can be determined based on their source, size, frequency, and other criteria.<\/p>\n

We offer a smart, reliable solution for identifying critical downloads:<\/p>\n

Data Loss Prevention with our SAST SUITE<\/strong><\/h2>\n

The SAST SUITE<\/a> enables you to identify potential incidents quickly and protect yourself against data loss. As soon as a user starts a download from a critical transaction, the process is logged and the software generates an event.<\/p>\n

The following example illustrates a download of the user table USR02 with the password hash values from transaction SE16.<\/p>\n

\"SAST<\/p>\n

When the download is started from transaction SE16 using the function \u201cSave as Local File\u201d, the user sees the following logging message:<\/p>\n

\"SAST<\/p>\n

When \u201cDownload\u201d is clicked, the table contents are saved on a local drive and the download is logged as described in the message. The SAST SUITE analyzes the log and triggers the appropriate events.<\/p>\n

In addition to the table name, the event view also displays information about the transaction and the terminal used, along with a time stamp and the size of the saved file.<\/p>\n

\"SAST
\nBased on this information, IT administrators can now identify download attempts and \u2013 particularly when critical data is downloaded \u2013 approach the user and ask whether these downloads are really necessary, as well as track the status of the data.\u00a0<\/strong><\/p>\n

Get the security status of your entire SAP system landscape at the touch of a button!<\/strong><\/h2>\n

The SAST SUITE lets you define specific critical transactions yourself in just a few simple steps and get alerts in the case of complex events \u2013 even as combinations of multiple incidents that aren\u2019t critical on their own. You will be able to identify future risks in real time and display a graded, dashboard-based display of your security status at the touch of a button.<\/p>\n

We will be happy to support you in designing data loss prevention measures at your company. For more information, visit our website<\/a> or send us an e-mail<\/a>.<\/p>\n

\"Viktor
\nViktor Vogt (SAP Security Consultant, SAST SOLUTIONS)<\/strong><\/p>\n

 <\/p>\n

More about security intelligence:<\/h2>\n

SAP security: Rest easy with a threat intelligence solution<\/a><\/p><\/blockquote>\n