A practical SAP BTP security guide: account and subaccount design, role collections and IdP group mapping, SAP Cloud Identity Services, Cloud Connector hardening, destinations, and audit logging.
Why publishing an SAP Fiori front-end server behind a Web Dispatcher is the wrong external-access design: what the ICF service tree exposes, what ICMAD and CVE-2025-31324 prove about pre-authentication reachability, and the layered architecture that keeps the ICM unreachable.
IT general controls (ITGC) explained with concrete examples per domain (access, change, development, operations), an ITGC audit checklist, and how they map to SOX, ISAE 3402 and SOC.
A practical guide to SAP platform cybersecurity beyond authorizations: SAP Security Notes and patching, system hardening, gateway and RFC security (UCON), secure communication (SNC), and monitoring with the Security Audit Log.
Meylan Technologies & Consulting