SAP Cyber security

July 24, 2018 BY iTGRC and VICXER

  Having been in SAP Basis and Security as a regional chief security officer for more than a decade, I again realize there's so much to learn. Continuous learning is a journey ...

A fabulous speech on SAP Cyber Security by VICXER. Jordan gave us an eye opening view of what we should be concerned about internal enterprise systems, even more when companies decide to move it to private or public cloud. Tune in... 

 
Having been in SAP Basis and Security as a regional chief security officer for more than a decade, I again realize there's so much to learn. Continuous learning is a journey regardless of whether you are an enterprise leader, business owner or IT professional.
 
iTGRC is proud to announce that we have recently formed a strategic partnership with VICXER, a SAP cyber-security service company. Our partnership will bring to the region a series of cyber security services; SAP penetration testing, code review, audit, and professional training, as well forensics. Our partnership sees great potential to leverage knowledge and practices from outside Asia Pacific to benefit enterprises and organizations who have been running and maintaining their SAP instances in Asia Pacific, by assisting them prepare their next move in digital transformation; be it migration to on-premise cloud on IaaS (Infrastructure as a service) or a radical move to PaaS (Platform as a service).
 
We are glad to present below a short excerpt from the founder: Jordan Santarsieri. Jordan is a speaker and trainer at many security conferences like Black-Hat, OWASP-US, HITB, Hacker Halted and Ekoparty, he had the privilege to secure more than 1000 SAP implementations around the world, including military institutions and Fortune-500 companies.
 
The relation between the corporate IT security people and the SAP practitioners is always a complex one, as I personally like to say, it is a Venn diagram that never intercepts.
 
In general, the IT security individuals, have a significant proficiency in the cyber-security field but they struggle to apply their know-how to SAP, meanwhile the SAP administrators, know this ERP from top to bottom, but they do not often master cyber-security.
 
This is why the first SAP penetration test is a huge eye opener for a company, as it quickly highlights the common deficiencies (often cause by several default misconfigurations) and proposes a clear and comprehensive action path, to quickly mitigate all the discovered vulnerabilities, uniting the main stake holders (CISOs, IT security managers, SAP administrators) along side the road
 
The service offerings are now officially available in Singapore and Malaysia. We are also supporting ASEAN region through our channels.
 
Beside, click on URL links below to see VICXER’s real life examples, with Jordan carrying out SAP Incident response to an “attack and defense”, as well as SAP Forensics on “high profile SAP hack”
SAP Forensics
 
 
Please do not hesitate to contact us at info@itgrc.asia or call us at Singapore Ph: +65 68180839, or Malaysia Ph: +607 2686066. If you prefer a private call, you can reach out to hkchang@itgrc.asia or Frankchin@itgrc.asia