If an SAP ERP system is set up without taking SAP's recommended security guides into account, this can lead to serious security problems in the system. For example, SAP recommendations on user and authorisation management may not be implemented correctly. Ignoring such SAP recommendations, which protect communications or interface operations that use RFC and web services, can lead to vulnerabilities. This can leave an entire system open to attacks.