Automatically Protect SAP Data Exports Used Across Process Chains

SAP Data at Risk

As organizations collaborate and share data with business partners, SAP users regularly download or export sensitive or even confidential data from SAP applications to generate reports, Excel spreadsheets, PDFs, and other documents.

SAP data is used beyond your IT perimeter.

This common user behavior disables the existing SAP access and usage controls. The SAP internal security system cannot protect the exported data anymore. This serious risk for data loss is not only impacting your business but also your compliance with legal requirements, such as GDPR, NIAP, APEC CBPR, BASEL, SOX, FISMA, HIPAA, etc.

How HALOCORE® Can Help

HALOCORE® monitors all data leaving SAP and helps closing compliance gaps. Unauthorized downloads or file exports will be blocked based on the company’s policy.

When integrated with the Microsoft Purview Information Protection (MPIP), the leading EDRM platform, HALOCORE reads the SAP business meta data tied to the document or transaction data.

Without user engagement, HALOCORE automatically applies the appropriate MPIP label before it leaves the secure SAP perimeter. Only authorized people can open and work with the exported SAP data.

Detect and automatically classify all SAP data exports and downloads from user frontends. Integrate this monitoring capability with all SIEM tools and SAP ETD.
Effectively prevent business-critical data and documents from leaving unauthorized the protected SAP application. Block copy & paste of data that must not leave SAP.
The only solution providing automated SAP data export protection based on a deep integration of Microsoft Purview Information Protection (MPIP, aka MIP or AIP).
Data Stream Intelligence (DSI) for monitoring background data transfers between the SAP system and other systems (SAP or Non-SAP) using exchange methods like RFC, IDoc or Webservice.
See How HALOCORE® Protects Your Business-Critical SAP Data

Facts & Features

The existing SAP user authorization (S_GUI) either allows all frontend downloads or blocks them at all for a user. With HALOCORE® you enable granular SAP access and usage controls for downloads based on SAP business metadata, user or data attributes. With this approach you extend the SAP security concept beyond the system’s boundaries or your IT perimeter.
HALOCORE® is integrated in SAP as a standard add-on. SECUDE performs the SAP certification process for such add-ons every year based on the latest HALOCORE® and SAP version. HALOCORE® has been certified for SAP NetWeaver and SAP S/4HANA. Contact us if you have specific SAP versions and tell us about your requirements, or download our detailed FAQs to learn more.
If your SAP data might be leaked or stolen, e.g. due to a ransomware attack, you can be sure that your SAP exports stay protected. Your files are encrypted anytime and everywhere, so only authorized people can open and work with them.

Thanks to HALOCORE® we can reduce significantly the effort for user administration and exchange success-critical process data quickly and securely.

Edward Riewe
Advanced SAP Security Beyond the IT Perimeter
HALOCORE® secures data exported from SAP systems with Microsoft Purview Information Protection (MPIP). Get in touch with us to learn how you can integrate this solution in your SAP landscape.