Boost Your SAP Solution Manager Security with SOS Reports
- by Tony de Thomasis, SAP Mentor, Solution Manager Practice Lead — Acclimation
- March 29, 2012
Learn how to generate the Security Optimization Service (SOS) report in SAP Solution Manager 7.1. Discover the level of security in your SAP landscape and learn proactive actions you can take in your system to improve its security.
The SAP Security Optimization Service (SOS) report scans selected SAP systems for critical security settings. To determine the actual risk, all perceived vulnerabilities are ranked using SAP best practices based on severity and probability. The SOS report contains all identified vulnerabilities of the analyzed SAP system landscape together with prioritized recommendations to eliminate or reduce identified vulnerabilities.
The SAP Security Optimization Service (SOS) is designed to help companies analyze and improve the security level of the SAP landscape. Several security checks now form part of a well-maintained SAP EarlyWatch Alert (EWA) report. The introduction of the SOS report can help verify and improve the security of the SAP systems by building on the critical authorization security checks that the EWA identifies. The SOS report also automatically generates proactive improvement recommendations to avoid potential security risks.
Maintaining a vigilant approach to potential security breaches is necessary to achieve the following benefits:
- Reduce the risk of system intrusion
- Protect critical business confidentiality
- Maintain SAP and operating system user authenticity
- Reduce potential downtime errors caused by the wrong staff having unmetered access to business data
- Help determine who is logging on to the production system
SOS reports perform the following security checks:
- Password authentication
- Basis administration security
- Change management security
- User authorization
- SAP NetWeaver application server
- SAP router
- Customer-specific authorization
- Human resources
The SOS report is one of several guided self-services delivered with SAP Solution Manager 7.1. These guided self-services can help Enterprise Support companies improve several common problem areas such as system performance, data volume management, change management, and business process.
I start by showing you the recommended landscape for using these reports, and then describe a few prerequisites. Finally, I take you step by step through how to set up and use SOS reports in your SAP Solution Manager system.
Would you like to see this full item?