Auditoria Sap Security

ISACA Presentation Section SAP Security – 1: Auditing
The Basics SAP Overview

April 25th 2006

! !" % " % " ' () * . ! + ! ! , % & ! ! # $

0 % # 1$ "
2 1 3$ $ 3 ! $ 4! 5 67 "" 8 ! 9 3 &1 + : , 1$ 3 " : " ; $ !$ $ $ 5 1 ! ! > 7?/ 3 < 763 @ A0 33 5= " " = ! , C 3 ! !

1 1$ + "

!" " 63 $ $ 1 =B " " ! 1 1$

/

0% "
$ ! , D 5 66 $ ! E , D !

!
! 5 67/ ! , D 1 ! " $ F $ " 11 $ $ * D / 1

0 ? " 0 ? 0/? 0/?= 0/? 0
=

3?

3 ? 3 ?5 3 ?5 3 ?5 "

3 /? $ /?7

0% "
1
0 $

!
!
! ! 1 !

* !
$ $

+ !
0 $ ! + ! 0# ! ! !

!
8 ! 1 ! $ 0 ? ? * G3 ! + 3

-$$
; $ $ $ ! A 1$ ! " @ $ 1! $

1
4 1

* !
1 ! # ! 1 ! H !$ $ , E !$ # $ " ,

!
? "$E E "$E 1 1 1 1 1

1 1 1 1 1

, @ DA ,

7

1
1 4 1

,
! " , D 1 !
1

! 1

F

04 0 ! 10 $ 0# $ #$ E

<

E #

!

04 !

Functional Category
Financials Operations Human Capital Corporate Services
!"

6

1
4 ! " # 1$ " # 1$ $ ; ,8 ! #! #! $ !

, 4

!

! ! !

$!$ $ $

; 1 ! $ G I " ! ! "

5

*
% " 4 ! 4 !

# 1$
, D " ! F
$ 1 # # 1 1 /? $ $ 3 * # 1$ @ 9 A $ 9 E $ 9 G 1 " 1

$ $

0 * D / 0# 1$ ! 0 !" I 0% 0 $

5 5

#

D
, D 1
0 ! $ ! I"

!
;

1 1! $ ! " 1$ ! 1$ ! 1 $

$ 1 1 1

" 1

0# " "" $

! ! F
0% ! " 0% " 0% "
5

""
@ $ !$ $ @

@
H @$ $ H

A"
A H A A

$ $

!

"

!

database informationend user

application server

database server

5

% , % " " D 1
Hardware UNIX Systems Bull IBM Digital SNI HP SUN AIX HP-UX Digital UNIX LINUX SOLARIS AT&T Bull/Zenith Compaq Data GeneralDigital HP (Intel) IBM (Intel) Sequent SNI ...

Operating Systems

Windows NT/2000

Databases

ORACLE 8i/9 Informix Online ADABAS D DB2/6000* (for AIX only)

ORACLE 8i/9 ADABAS D MS SQLServer

Dialog SAP-GUI SAP-

Windows 3x, Windows 9x, Windows XP Presentation Manager, Macintosh

Languages

ABAP/4, C, C+ +

5 /

!
1 # 1$

5 =

$ $
% " 1$ J 4 F

!
!
SAP...