Skip to Content
author's profile photo Former Member
Former Member

Is it wise decision if I move to SAP- Security.

Hi All,

Need your precious suggestions

My current profile:- I have 6+ exp in Information Security and now planning to switch to SAP Technology for further growth(specifically into SAP-Security). Please reply to below questions so that I can take firm decision

1. Is it wise, to switch to SAP-Security after having 6+ exp in IT Security? (point to consider Salary after switching)

2. Any contact details where I can get proper SAP-Training in Pune.

3. What is the Future of SAP-Security?



Thanks in Advanced.

Rakesh P

Add comment
10|10000 characters needed characters exceeded

2 Answers

  • Best Answer
    Posted on Aug 14, 2015 at 12:15 PM

    Hello Raqesh,

    Being a IT Security person, it would be a great path to be SAP Security Consultant, particularly, where there is great demand for GRC. I am not sure what is your currently and whether initial SAP salary would match it. But, I can surely say in long run SAP Security would be lucrative. Learn not just standard SAP Security, also go for GRC. Lot of demand for GRC Consultants in particular in SAP Security area.

    Following are the SAP Authorised Training Partners in India:

    Training Locations

    As long as SAP is there, SAP Security will be there. So, you do not need to worry about it.

    All the best.

    Kind Regards,

    Ravi

    Add comment
    10|10000 characters needed characters exceeded

    • Hi Rakesh,

      Unless you get a job in a company, you do not get real time exposure. Some people do sell the project experience by doing a dummy project, it is not a real time project, it is just a dummy project, it cannot be construed as real time experience.

      Basis is NOT a prerequisite for a SAP Security person.

      Kind Regards,

      Ravi

  • author's profile photo Former Member
    Former Member
    Posted on Aug 12, 2015 at 09:51 PM

    Hi Raqesh,

    I will give you my two cents around it, as I followed a journey which is somehow similar.

    SAP Security and IT Security are two completely different areas (actually they are typically two different teams). They speak different languages and traditionally they do not speak to each other:

    • SAP Security teams have the hard task of defining and maintaining user authorizations, roles, profiles and authorization objects, among other things, but they do not understand the impact of command execution vulnerabilities or a phishing attack.

    • IT Security instead is making sure all servers are properly configured and patched, monitoring the SIEM, firewalls and antivirus installation among other things, but they don't know about an SAP instance number, the "mandant" or the X-tiers landscape of our ERP/CRM systems.

    I think that moving from the IT Security field to the SAP Security field will give you a good background of "cybersecurity" but it implies the challenges of learning all the SAP concepts, products and processes. Having said that, I will try to cover your points:

    1- I cannot help you on this, but I'm sure you can check for it online (plenty of sites with information about SAP Security salaries).

    2- Training is key for you, but I would say that there are plenty more options for SAP Security trainings than for IT Security trainings (and the trainings are more standardized, just google SAP Security Training and you will get thousands of results).

    3- The future of SAP Security will have to include knowledge around IT Security concepts, including patching processes, secure configuration management, security of the perimeter and interfaces, protocols, encryption, authorization, logging, monitoring... including IT Security within SAP Security. SAP cybersecurity is the missing link for a holistic SAP Security posture.

    I hope it helps.

    Best,

    JP

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      Hi JP,

      Thanks for reply. It really helps a lot.

      One more thing to ask that, is there any relation between BASIS and Security. Do I need to get understanding of BASIS before Security Training ?

      Thanks

      Raqesh