Daunting ‘Vulnerabilities’ in SAP Systems.
In our digital age
where, Companies are
eager to harness the opportunities presented by moving systems to the cloud,
enabling user adoption through mobile devices and big data, it is daunting to observe that SAP
systems seem not protected from cyber threats by traditional security approaches.
According to Onapsis, the global experts in business-critical application security, three most
common cyber attack vectors can be used for compromising SAP business systems
at the application layer.
The Onapsis Research Labs
study found that over 95 percent of SAP systems were exposed to vulnerabilities
that could lead to full compromise of the company’s business data and
processes. ‘’These attack vectors put
intellectual property, financial, credit card, customer and supplier data as
well as database warehouse information at risk for the world's largest
companies’’.
“The big surprise is that SAP cybersecurity is falling through the cracks at most companies due to a ‘responsibility’ gap between the SAP Operations team and the IT Security team;” “the truth is that most patches applied are not security-related, are late or introduce further operational risk. Breaches are happening every day but still many CISOs don’t know because they don’t have visibility into their SAP applications’’, said Mariano Nunez, CEO and co-founder of Onapsis.
Based on these realities Connectikpeople.co encourages Information security professionals to re-evaluate how SAP is protected
from cybersecurity threats.