SAP Launches New Service to Help Customers Ensure IT Security

SAP Launches New Service to Help Customers Ensure IT Security

SAP Expands Global Service Portfolio with SAP(R) Security Optimization

WALLDORF, Germany, Dec. 15 /PRNewswire-FirstCall/ -- SAP AG (NYSE:SAP) today announced a new service offering to help customers ensure the security of their SAP(R) systems. The service, SAP(R) Security Optimization, entails a comprehensive evaluation of critical security settings across the customer's SAP system landscape to identify and eliminate potential vulnerabilities and minimize the risk of unauthorized intrusions.

With the growing complexity of corporate IT landscapes and their increasing exposure via Internet gateways, enterprises have become increasingly vulnerable to security breaches. Systems that formerly had been accessible only from within the company can now be accessed externally by employees, business partners and, with the prevalence of online shops and customer service Web interfaces, also by customers.

Performed remotely by SAP and to a large extent automated, SAP Security Optimization searches for vulnerabilities in an enterprise's SAP landscape -- from applications and middleware, to Internet gateways and interfaces to partners' systems, to user authorizations. Following the one- to two-day evaluation, customers receive a detailed analysis of security gaps and vulnerabilities -- prioritized according to severity and probability -- and action plans on how to resolve them. The recommended security measures can be carried out by the customer or by experienced security consultants from SAP Consulting and certified SAP partners.

Driving Security Measures at Fiat-GM Powertrain

One of the first customers for the security optimization service is Turin, Italy-based Fiat-GM Powertrain, a Fiat and General Motors joint venture producing engines and transmissions. For its recent integration of financials and indirect materials management processes within the company's "Formula One: SAP" program, the SAP security check was done after having merged two completely diverse environments of numerous legacy applications and servers. At this stage, the project team sought a reliable and thorough security assessment that could be carried out on short notice and that would zero in on its most urgent security needs.

Without any administrative hold-ups, the SAP service team quickly executed a comprehensive check that pinpointed pressing issues. Although there were no surprises in terms of the applications' transactions, the check identified users and even consultants no longer requiring access to the SAP system and delivered recommendations within the security report to help security administrators take preventive actions.

Staying on Top of Evolving Security Demands

As IT landscapes are in a constant flux of changing business processes and access authorizations, SAP recommends that security checks be undertaken at regular intervals. Organizations can thus run the most up-to-date checks, verify the effectiveness of implemented security measures derived from earlier service runs and verify that recent configuration changes have not introduced new security holes.

"With the dynamic development of enterprise IT landscapes and their increasing openness to customers and business partners, companies are continually presented with new challenges in terms of security," said Sachar Paulus, chief security officer, SAP AG. "Knowing that our customers run business-critical information on SAP systems, we have always taken IT security very seriously. SAP Security Optimization will help our customers fortify their system landscapes and safeguard the sensitive data and processes that are essential to their business success."

SAP Security Optimization is part of SAP Active Global Support's portfolio of customer services to help keep SAP solutions running optimally, improve return on investment and reduce the cost of operations.

For interested customers, further information on SAP Security Optimization is available in the SAP Service Marketplace at www.service.sap.com. Here, the service can be ordered via the SAP Service Catalog under SAP Support Portal / Maintenance & Services / Service Catalog (select "SAP Solution Management Optimization").

About SAP

SAP is the world's leading provider of business software solutions*. Today, more than 24,450 customers in over 120 countries run more than 84,000 installations of SAP(R) software -- from distinct solutions addressing the needs of small and midsize businesses to enterprise-scale suite solutions for global organizations. Powered by the SAP NetWeaver(TM) platform to drive innovation and enable business change, mySAP(TM) Business Suite solutions are helping enterprises around the world improve customer relationships, enhance partner collaboration and create efficiencies across their supply chains and business operations. SAP industry solutions support the unique business processes of more than 25 industry segments, including high tech, retail, public sector and financial services. With subsidiaries in more than 50 countries, the company is listed on several exchanges, including the Frankfurt stock exchange and NYSE under the symbol "SAP." (Additional information at http://www.sap.com/ )

(*) SAP defines business software solutions as consisting of enterprise resource planning and related software solutions such as supply chain management, customer relationship management, product lifecycle management and supplier relationship management.

Any statements contained in this document that are not historical facts are forward-looking statements as defined in the U.S. Private Securities Litigation Reform Act of 1995. Words such as "anticipate," "believe," "estimate," "expect," "forecast," "intend," "may," "plan," "project," "predict," "should" and "will" and similar expressions as they relate to SAP are intended to identify such forward-looking statements. SAP undertakes no obligation to publicly update or revise any forward-looking statements. All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ materially from expectations. The factors that could affect SAP's future financial results are discussed more fully in SAP's filings with the U.S. Securities and Exchange Commission ("SEC"), including SAP's Annual Report on Form 20-F for 2003 filed with the SEC on March 23, 2004. Readers are cautioned not to place undue reliance on these forward-looking statements, which speak only as of their dates.

Copyright (C) 2004 SAP AG. All rights reserved.

SAP, R/3, mySAP, mySAP.com, xApps, xApp, SAP NetWeaver and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP AG in Germany and in several other countries all over the world. All other product and service names mentioned are the trademarks of their respective companies. Data contained in this document serve informational purposes only. National product specifications may vary.

For customers interested in learning more about SAP products:
Global Customer Center: +49 180 534-34-24
United States Only: 1 (800) 872-1SAP (1-800-872-1727)

For more information, press only:
Bill Wohl, +1 (610) 661-3311, william.wohl@sap.com, EST
SAP Press Office, +1 (610) 661-3200, press@sap.com, EST
Gabriele Thoering, Burson-Marsteller, +49 (69) 2380939,
gabriele_thoering@de.bm.com, CET



Source: SAP AG

CONTACT: Bill Wohl, +1-610-661-3311 or william.wohl@sap.com, EST; SAP
Press Office, +1-610-661-3200 or press@sap.com, EST; Gabriele Thoering,
Burson-Marsteller, +49 (69) 2380939 or gabriele_thoering@de.bm.com, CET; all
for SAP

Web site: http://www.sap.com/


-------
Profile: intent