Is it wise decision if I move to SAP- Security.

[Former Member]

Hi All,

Need your precious suggestions

My current profile:- I have 6+ exp in Information Security and now planning to switch to SAP Technology for further growth(specifically into SAP-Security). Please reply to below questions so that I can take firm decision

1. Is it wise, to switch to SAP-Security after having 6+ exp in IT Security? (point to consider Salary after switching)

2. Any contact details where I can get proper SAP-Training in Pune.

3. What is the Future of SAP-Security?

Thanks in Advanced.

Rakesh P

[Former Member]

Hi Raqesh,

I will give you my two cents around it, as I followed a journey which is somehow similar.

SAP Security and IT Security are two completely different areas (actually they are typically two different teams). They speak different languages and traditionally they do not speak to each other:

• SAP Security teams have the hard task of defining and maintaining user authorizations, roles, profiles and authorization objects, among other things, but they do not understand the impact of command execution vulnerabilities or a phishing attack.

• IT Security instead is making sure all servers are properly configured and patched, monitoring the SIEM, firewalls and antivirus installation among other things, but they don't know about an SAP instance number, the "mandant" or the X-tiers landscape of our ERP/CRM systems.

I think that moving from the IT Security field to the SAP Security field will give you a good background of "cybersecurity" but it implies the challenges of learning all the SAP concepts, products and processes. Having said that, I will try to cover your points:

1- I cannot help you on this, but I'm sure you can check for it online (plenty of sites with information about SAP Security salaries).

2- Training is key for you, but I would say that there are plenty more options for SAP Security trainings than for IT Security trainings (and the trainings are more standardized, just google SAP Security Training and you will get thousands of results).

3- The future of SAP Security will have to include knowledge around IT Security concepts, including patching processes, secure configuration management, security of the perimeter and interfaces, protocols, encryption, authorization, logging, monitoring... including IT Security within SAP Security. SAP cybersecurity is the missing link for a holistic SAP Security posture.

I hope it helps.

Best,

JP

[Former Member]

Hi JP,

Thanks for reply. It really helps a lot.

One more thing to ask that, is there any relation between BASIS and Security. Do I need to get understanding of BASIS before Security Training ?

Thanks

Raqesh

[former_member182098]

Hello Raqesh,

Being a IT Security person, it would be a great path to be SAP Security Consultant, particularly, where there is great demand for GRC. I am not sure what is your currently and whether initial SAP salary would match it. But, I can surely say in long run SAP Security would be lucrative. Learn not just standard SAP Security, also go for GRC. Lot of demand for GRC Consultants in particular in SAP Security area.

Following are the SAP Authorised Training Partners in India:

Training Locations

As long as SAP is there, SAP Security will be there. So, you do not need to worry about it.

All the best.

Kind Regards,

Ravi

[Former Member]

Hi Ravi,

Thanks for reply.

Does it necessary to have a certification or just training would be OK.?

Thanks

Rakesh P

[former_member182098]

Hi Raqesh,

In training of 25 days, they would touch all the basic fundamentals of the subject. Within 25 days nobody can become expert. Employers look beyond training. Getting trained is good to have but need not necessarily employers would take just based on few days training. If you have real time experience, nothing matters.

Hope this helps.

Kind Regards,

Ravi

[Former Member]

Hi Ravi,

Indeed.....!

What is the best way to have real time experience? I know its odd to ask such questions but if you could have any idea please share.

One more thing, does SAP Basis prerequisite for SAP Security by any chance?

Thanks

Rakesh P

[former_member182098]

Hi Rakesh,

Unless you get a job in a company, you do not get real time exposure. Some people do sell the project experience by doing a dummy project, it is not a real time project, it is just a dummy project, it cannot be construed as real time experience.

Basis is NOT a prerequisite for a SAP Security person.

Kind Regards,

Ravi