German cyber security firm ESNC is positioning its Enterprise Threat Monitor (ETM) as a critical security factor for SAP customers, with the increasing adoption of SAP S/4 HANA cloud architecture potentially exposing organisations to new types of security threats.
Focused exclusively on maintaining security for SAP customers, ESNC says it is no longer a question of if but rather when a security breach will occur. ESNC identifies three areas of security provided by ETM: compliance, real-time threat detection and noise reduction.
Meeting all SAP real-time monitoring audit requirements, ETM is preconfigured with hundreds of SAP compliance violation cases, including those that monitor for unauthorised access to critical information and bypass for change management processes.
With just over a year before the SAP GDPR rules become law, the company emphasises that it is more important than ever to consider how cloud landscapes will be protected now and in the future.
“With an extensive set of use cases developed specifically around SAP issues like role assignment abuse and the download of sensitive data, our product was designed from the ground up to solve such problems quickly,” said Ertunga Arsal, Enterprise Threat Monitor founder and security researcher.
ETM provides protection through the entire lifecycle, from SAP migration to fully installed mature SAP cloud and on-premise systems. Users receive instant notification via email or SMS in the event of an attack.
ETM enables SAP SIEM integration with leading SIEM solutions such as Splunk, QRadar and ArcSight. ETM addresses the important issue of noise with its adaptive noise reduction technology.
ESNC cites results experienced at a recent customer implementation, which involved analysing 1 billion SAP security audit log events. ETM eliminated 98 per cent of the noise, saving more than 130 man-days of work during the initial project phase.
