Advanced sap cybersecurity webinar

1. Advanced SAP Cybersecurity and
Automation in your Application
Delivery Process

2. AGENDA
1 About REALTECH and SecurityBridge
2 DevOps for SAP
3 The SecurityBridge Solution
4 Q&A
5 REALTECH & SecurityBridge Offering
5/5/2021 2
REALTECH Inc. © 2021

3. REALTECH and SecurityBridge Offerings
• SmartChange Solutions
• Change Process Management
• Transport Management
• Synchronization Management
• S/4 HANA and SoH Migrations –
on-premise and cloud
• SAP Technical Upgrades
• Managed Services for Basis
• SecurityBridge SAP Security Offering:
• Vulnerability Management
• Patch Management
• Code Scanner
• Threat Detection
5/5/2021 3
REALTECH Inc. © 2021

4. DevOps for SAP means to intelligently modify
best practices and methods and adapt them to
today's requirements.
“Optimization for speed vs. optimization by cost”
“Fast reaction on market requests vs. slow by design”

5. In the wake of digitization, SAP systems must become more
agile, flexible and faster
Customer Requirements Recommendations
 How a start-up reacts quickly to wishes or changed
conditions at any time.
 Development and Operations work together closely
are more agile – with each other but also with
customers and departments
 Anticipating and shaping necessary changes in the
business
 Collaboration, lean processes and automation tools
enable short development and release intervals as
well as communication routes
 Bring changes quickly and safely into production  Integration and automation across all phases of
change and release management
= DevOps achieves faster market reactions and thus more sales potential
5/5/2021 5
REALTECH Inc. © 2021

6. DEVOPS FOR SAP
Principles
5/5/2021 6
REALTECH Inc. © 2021
Agility in Development
Faster response to market trends
And customer needs.
Fail early – Learn fast!
Result-oriented feedback prevents
time-consuming corrections.
Interdisciplinary Teams
Collaboration between all
SAP experts in the company
Stability in Operation
More quality in daily operation
due to reduced error rate and
Process telemetry.
SAP Automation
Automatic Deployment according
to critically (white/blacklist)
Integration
Synchronizing the available
data sources improves IT
processes and reduces
redundant workload.

7. SAP organizations should no longer avoid the
increasing demand pressure
Make new business functions
available quickly
Protect and carefully expand
past investments
Ensure stability and reliability
Speed, flexibility and short
development cycles
Integration of new methods &
technologies
SAP Organization
7
5/5/2021 REALTECH Inc. © 2021

8. The goal is a more efficient cooperation between development, operations and
quality assurance. For this special incentives, tools and processes are used.
5/5/2021 REALTECH Inc. © 2021 8

9. Plan
 Conceptual elaboration of
the development,
requirements engineering
Operate
 Operational
operation and
application of the
new program logic
Develop
 Specialist in program
logic, technical tests Test
 Mostly automated further
technical, professional &
integrative test
Feedback
 Formalized feedback loop
from operation to the other
lifecycle stages
Release
 Deployment of the
program logic including
the underlying
infrastructure
DevOps – Tools, Technology, Cooperation
5/5/2021 REALTECH Inc. © 2021 9

10. Where can we act comprehensively?
SAP Development Pipeline
Develop
Import to
Q
Test
Functionally
Test
Technically
Import to
P
Feedback
Technical Test
Development
Functional Test
Q-Import
P-Import
• Automated
integration test in Q
based on
dependent
database objects
• Direct inclusion in
the transport
workflow after
successful technical
test and import into
the test system
• Development on
multicoding
platforms such as
Github, integration
in SAP necessary
• Integration of test
management suites
ensures automation,
management of test
cases is very time-
consuming
• Direct inclusion in
the transport
workflow after
successful technical
test and import into
the test system
5/5/2021 REALTECH Inc. © 2021 10

11. 11
TheGuard! Smartchange Solutions
theGuard!
SmartChange
Transport Management
Synchronization Management
Change Process Management
5/5/2021 REALTECH Inc. © 2021
JIRA/SNOW Integration

12. REALTECH Solutions bring value with increasing automation
5/5/2021 REALTECH Inc. © 2021 12
 Complete Transparency and Visibility of all changes that move thru
environment
 Reduced Risk in all systems including production systems
 Proactive Technical Checks and Balances before movements of SAP changes in
the systems
 Using tools instead of Spreadsheets, emails, etc reducing cost and overhead
 Streamlined CAB Meetings which saves time
 Decreases amount of SAP Changes moving to Production when doing Transport
of copies
 Audit Rockstar

13. welcome.
I hacked
your SAP.

14. Advanced Cybersecurity for your SAP
Systems improve the quality
 All business-critical SAP applications are under pressure
 Companies have to protect the Business
 Fullfill legal & compliance requirements
 Follow the cloud-strategy
 Master the transformation projects to S/4 HANA
 Every Change of the system is a threat
5/5/2021 REALTECH Inc. © 2021 14

15. ATTACK VECTORS
CONFIGURATION
VULNERABILITY
KNOWN PRODUCT
ERROR
CUSTOMER CODE
VULNERABILITY
ZERO
DAY
VULNERABILITY
MANAGEMENT
PATCH
MANAGEMENT
CODE
SCANNER
THREAT
DETECTION
TM

16. Fundament
TM
System
Application
Business process
SAP Coding
Custom Coding Customizing Authorizations Roles & Profiles
Functions & Reports
Interfaces
Application Data Security 3rd Party tools
Log Files Directories
Database
Authorization & Access Config. files
SAP Gateway SAP Router …
HTTP
Change Management
DEV QAS
Prod

17. Continuous improvement of your SAP systems
Security
Quality
Maturity
security Monitoring
automated processes
Defined processes
Integrated processes
continuous processes
Threat Detection
vulnerability management
Holistic approach
Patch Management Review process
Incident management
Baseline
360-degree view
Standards

18. TM
System
Application
Business process
Change Management

19. SECURITYBRIDGE
AUDIT-TRAIL
Example #1
Abuse of rights
Timeline
Admin John (BCADMIN) creates a new account for Anna from
accounting (I348922). Instead of sending Anna her new password,
John logs in with Anna’s credentials to download the user password
hashes from a table.
To cover-up all the evidence, John deleted Anna’s account again.
5/5/2021 REALTECH Inc. © 2021 19

20. Example #2
Code vulnerabilities
• Project Manager is updating a development project,
importing an update Package to the Production
System.
• He is not able to check the package and must rely on
the testing team.
• The testing Team is only testing the project update
functionality.
• Vulnerabilities could sneak into the production
system.
5/5/2021 REALTECH Inc. © 2021 20

21. REALTECH and SecurityBridge Solution
5/5/2021 REALTECH Inc. © 2021 21

22. REALTECH and SecurityBridge Offering
5/5/2021 REALTECH Inc. © 2021
• 30 day no obligation trial of our
solution either in our cloud or on your
SAP systems – (transports with code
delivered 1 day setup per 1 landscape
if on premise)
• SaaS pricing – pay as you go and cancel
at anytime
• See immediate benefits to your existing
processes for application delivery
management and security compliance
for SAP
• Management reports delivered out of
the box for your leadership
• Legendary support for applications
22

23. Q&A
5/5/2021 23
REALTECH Inc. © 2021

24. Thank You
5/5/2021 24
REALTECH Inc. © 2021

25. Contact
5/5/2021 25
REALTECH Inc. © 2021
Rudolf Kubica
Sales Engineer
SecurityBridge
Securing SAP: realtime threat monitoring
p: +49 1714790841
e: rudolf.kubica@securitybridge.com
w: www.securitybridge.com
David Milano
CEO
REALTECH
p: 610-356-4401
e: david.milano@realtech-us.com
w: www.realtech-us.com