This ses­sion will give an overview of what chal­lenges Tech Data has encoun­tered dur­ing the imple­men­ta­tion of our SAP appli­ca­tion secu­ri­ty mon­i­tor­ing and inci­dent response, includ­ing how we over­came them. 

Key take­aways:

• Our approach to SAP secu­ri­ty mon­i­tor­ing for ABAP, Java, HANA sys­tems, and SAP’s cloud solutions
• Deter­min­ing what to mon­i­tor, how to mon­i­tor, and elim­i­nat­ing the false positives
• Using automa­tion to sig­nif­i­cant­ly reduce man­u­al work
• Avoid­ing com­mon pit­falls: How we enabled SM19/SM20 log­ging with­out exhaust­ing our file storage
• How we inte­grat­ed all these with SIEM (Secu­ri­ty Inci­dent and Event Management)

Time­stamps:

• 1:45 – Speak­er introduction
• 2:20 – Key take­aways and agen­da overview
• 4:10 – Tech Data Cor­po­ra­tion at a glance
• 5:30 – Project con­sid­er­a­tions and ear­ly SAP secu­ri­ty status
• 7:50 – New approach to SAP Secu­ri­ty Monitoring
• 9:30 – Tech Data’s SAP Land­scape Security
• 11:45 – Real-time SAP secu­ri­ty mon­i­tor­ing and SIEM integration
• 17:15 – SIEM for SAP – tech­nol­o­gy selection
• 19:15 – Threat mon­i­tor­ing and fraud detec­tion cases
• 24:55 – Sen­si­tive data access: inci­dent or secu­ri­ty exception?
• 33:10 – Automa­tion and reduc­ing man­u­al work
• 35:15 – SAP secu­ri­ty mon­i­tor­ing best practices
• 36:40 – Mea­sur­ing success