+APP.4.2.A7 Protection of SAP Databases (B)

APP.4.2.A7 Protection of SAP Databases (B)

Access to SAP databases MUST be secured. Whenever feasible, administrators SHOULD only be able to access the databases with SAP tools. If third-party software is used for this purpose, additional security safeguards MUST be implemented. The users SAPR3 or SAP<SID> MUST NOT be used to connect to databases. In addition, the default passwords (e.g. for SAPR3 or SAP<SID>) MUST be changed and certain database tables (such as USR* tables) placed under special protection.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.14 Interception of Information / Espionage
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.25 Failure of Devices or Systems
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation
blocks G 0.39 Malware
blocks G 0.43 Attack with Specially Crafted Messages
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information