Checklist

[Former Member]

Hi Guys,

I am preparing Security monitoring Checklist to be run on Daily, weekly and monthly basis, please suggest me some transactions and reports which I can include in the checklist which would help me later in Audit also...

Thanks in advance

[Former Member]

look here for info http://www.sapsecurityonline.com//sox_sod/sox_sod.htm

[Former Member]

Hello Madhusudan,

Also take a look at transaction RZ20 (CCMS) and the documentation on it.

Cheers,

Julius

[Former Member]

Hi,

TCode TCode - Description

AL08 User Logged on Details

DB02 Database Space: Check for space errors

DB11 Early Watch Profile Maintenance

DB12 Backups: Check DB12 for last successful backup

PFCG Profile Generator – Activity Groups

RZ10 Maintenance of Profile Parameters

RZ11 Profile Parameters

SCC1 Clinet Copy special Service ( Transport Request )

SCC4 Diplay the Clients Overview

SCOT SAP Connect - Administration (Jobs)

SE09 Workbench Organizer ( Transport )

SE10 Customizer Organizer

SE11 ABAP/4 Dictionary Maintenance

SE16 Data Browser

SE38 ABAP/4 Editor

SE91 Maintain Messages

SE93 Maintain Transaction Codes

SM04 Users: Note the number of users and modes

SM12 Locks: Note the number of locks

SM21 System Log: Review any errors and comment

SM35 Batch Input: Review any errors and comment

SM36 Background Jobs Create

SM37 Batch Jobs: Review any cancelled or Failed jobs

SM50 Work Processes: Note any restarted processes/ Work Process Status

SM51 List of SAP Servers / All Application Server Running

SM66 System-wide Work Process Overview

SOST SAP Connect - Transmission Request (workflow - Notifiaction mail check)

SP01 Output Controller,look for error stsus and problem status.

SP12 TemSe: Ensure there are no inconsistencies

SPAD Spool Administration ( Printer details )

ST02 SAP Buffers: Check for swapped buffers and Hit Ratio

ST03 Total DIALOG steps for this week / dialog steps , avg respince time , cpu time,db request time.

ST04 Database Buffers: Check for poor cache hit rates

ST06 OS Buffers: Check for high run queue average / compare resent days->idle average.

ST22 ShortDumps: Explain each short dump,look for ababp dumps , and record if dump is occuring more than 10 times in a day.

SU01 Maintain User Records

SU02 Maintain Authorization Profiles

SU03 Maintain Authorizations

SU10 Mass Changes to User Master Records

SU12 Mass Changes to User Master Records

SU20 Maintain Authorization Fields

SU21 Maintain Authorization Objects

SU22 Auth Objects Usage in Transactions

SU24 Maintain Profile Generator Tables

SU25 Copy SAP to Customer Prof Gen Tables

SU30 Overall Authorization Checks

SWI2_DIAG Diagnosis of Work Items Containing Errors

Thks

Rajesh.

[Former Member]

I search various forums and internet and bassed upon my requirement I am able to enforce one checklist.