SAP HR/HCM security is gaining more popularity because of the recent legal changes to handling of private information in Germany and in other countries.
We offer SAP security audit services specialized on HR systems. Combined with an ABAP security analysis, we can detect most of the critical issues on customer SAP HR systems in a short time.
Our solution Enterprise Threat Monitor (https://www.enterprise-threat-monitor.com) detects access and download of critical data real-time.
We find a lot of cases where it is as simple as using a compromised communication user for accessing salary related tables such as PA0008 and via RFC functions such as RFC_READ_TABLE.
We help SAP customers mitigate HR security issues in a short time. The common security vulnerabilities we discover are in the domain:
Personal Administration (PA) Security
SAP BASIS Security
Secure Network Communications
For secure awareness we present the findings e.g how easy it is to change critical information in customer SAP systems, via easy to understand demos.
Please contact us via sap_hr_security [at] esnc.de for more information.