R/3 Security Guide

With the increasing use of distributed systems to manage business data, the demands on security are also on the rise. When using a distributed system, you need to be sure that your data and processes support your business needs without allowing unauthorized access to critical information. User errors, negligence, or attempted anipulation on your system should not result in loss of information or processing time. These demands on security apply likewise to the SAP R/3 System. Therefore, at SAP, we offer a number of services to meet the security demands on the R/3 System.

However, to effectively use our services, you need to make your own contribution as well. You need to determine which security demands apply specifically to your system. We encourage you to carefully analyze your requirements on system security and define priorities. Where are you most vulnerable? What information do you consider critical? Where is critical information stored or transferred? What security options are available to protect your critical data and communications? We recommend you establish a security policy that reflects these requirements and priorities. Your security policy needs to be supported and encouraged from upper management as well as from your employees. It should be practiced company-wide and cover your entire IT-infrastructure, to include your R/3 System. It should encompass all security aspects that are important to your system. Security aspects that you could consider include: