Tips on How to Secure and Control SAP HANA

  • by Rahul Urs, SAP Security and GRC Solution Architect, itelligence
  • October 8, 2014
Rahul Urs discusses how to implement security and controls in SAP HANA and points out potential security flaws and common oversights.
Learning Objectives

By reading this article you will learn:

  • Security, risk, and controls based on various SAP HANA scenarios
  • SAP HANA security functions such as authentication, authorization, and auditing
  • SAP HANA risk and controls from an audit perspective
Key Concept

SAP HANA is an in-memory, column-based database management system designed to support real-time analytics and transaction processing. As part of the SAP HANA database, security and controls play an important role to harden the breaches that could exist while implementing the SAP HANA solution, reducing compliance costs and security risks.

SAP HANA provides several security functions such as authentication, authorization, encryption, and audit logging that enable the implementation of security policies based on the scenarios in which SAP HANA can be used. SAP HANA can be used in providing application services using SAP HANA Extended Services (XS), for reporting and analytics in data marts, and as a database in SAP Business Warehouse (SAP BW) and SAP Business Suite applications. It is important to consider the different scenarios and the security and control impacts before implementing SAP HANA security. In this next section, I provide more details on the different scenarios.

Rahul Urs

Rahul Urs is an SAP security and GRC solution architect at itelligence leading a wide variety of projects, focusing on streamlining SAP GRC, SAP HANA, and SAP security to support compliance or new technology initiatives. He is an SAP NetWeaver subject matter specialist with special emphasis on SAP security, SAP HANA, GRC solutions. and BW/BOE.

See more by this author


Comments

No comments have been submitted on this article. 


Please log in to post a comment.

To learn more about subscription access to premium content, click here.