--- title: "SAP RISE: Don't fire your security team just yet." description: There seems to be a misconception that with SAP RISE SAP systems are secured (by default) and there is nothing further to do. image: https://www.legupsoftware.com/hubfs/SAP%20RISE_Don%E2%80%99t%20fire%20your%20security%20team%20just%20yet.2024-11-25.jpg --- [![logo](https://www.legupsoftware.com/hs-fs/hubfs/Website,%20Dec%202022/Assets/logo.png?width=300&height=61&name=logo.png "logo")](https://www.legupsoftware.com) - [Home](https://www.legupsoftware.com) - [Solutions](https://www.legupsoftware.com/solutions) - [For SAP Adminstrators](https://www.legupsoftware.com/expert_insights/solutions#administrators2) - [For SAP Basis Teams](https://www.legupsoftware.com/expert_insights/solutions#basis-teams2) - [For SAP Developers](https://www.legupsoftware.com/expert_insights/solutions#developers2) - [For SAP Support Teams](https://www.legupsoftware.com/expert_insights/solutions#support-teams2) - [For SAP Security Teams](https://www.legupsoftware.com/expert_insights/solutions#security-teams2) - Products - [SAP Incident Ticketing](https://www.legupsoftware.com/product-itsm-connector) - [SAP System Copy](https://www.legupsoftware.com/product-libelle-systemcopy) - [Data Anonymisation](https://www.legupsoftware.com/product-libelle-datamasking) - [iDoc Management and Monitoring](https://www.legupsoftware.com/product-libelle-edimon) - [SAP Security Vulnerability Analysis and Monitoring](https://www.legupsoftware.com/product-smartersec) - [SAP License Management and Optimisation](https://www.legupsoftware.com/product-samq) - [SAP User Role and Authorisation Management](https://www.legupsoftware.com/product-soterion) - [About](https://www.legupsoftware.com/about) - [Events](https://www.legupsoftware.com/events) - [Expert Insights](https://www.legupsoftware.com/expert_insights) - [Resource Library](https://www.legupsoftware.com/resources) - [Partners](https://www.legupsoftware.com/partners) - [Contact](https://www.legupsoftware.com/contact) [Get in touch](https://www.legupsoftware.com/contact) [![logo](https://www.legupsoftware.com/hs-fs/hubfs/Website,%20Dec%202022/Assets/logo.png?width=300&height=61&name=logo.png "logo")](https://www.legupsoftware.com) [Get in touch](https://www.legupsoftware.com/contact) [![logo](https://www.legupsoftware.com/hs-fs/hubfs/Website,%20Dec%202022/Assets/logo.png?width=300&height=61&name=logo.png "logo")](https://www.legupsoftware.com) - [Home](https://www.legupsoftware.com) - [Solutions](https://www.legupsoftware.com/solutions) - [For SAP Adminstrators](https://www.legupsoftware.com/expert_insights/solutions#administrators2) - [For SAP Basis Teams](https://www.legupsoftware.com/expert_insights/solutions#basis-teams2) - [For SAP Developers](https://www.legupsoftware.com/expert_insights/solutions#developers2) - [For SAP Support Teams](https://www.legupsoftware.com/expert_insights/solutions#support-teams2) - [For SAP Security Teams](https://www.legupsoftware.com/expert_insights/solutions#security-teams2) - Products - [SAP Incident Ticketing](https://www.legupsoftware.com/product-itsm-connector) - [SAP System Copy](https://www.legupsoftware.com/product-libelle-systemcopy) - [Data Anonymisation](https://www.legupsoftware.com/product-libelle-datamasking) - [iDoc Management and Monitoring](https://www.legupsoftware.com/product-libelle-edimon) - [SAP Security Vulnerability Analysis and Monitoring](https://www.legupsoftware.com/product-smartersec) - [SAP License Management and Optimisation](https://www.legupsoftware.com/product-samq) - [SAP User Role and Authorisation Management](https://www.legupsoftware.com/product-soterion) - [About](https://www.legupsoftware.com/about) - [Events](https://www.legupsoftware.com/events) - [Expert Insights](https://www.legupsoftware.com/expert_insights) - [Resource Library](https://www.legupsoftware.com/resources) - [Partners](https://www.legupsoftware.com/partners) - [Contact](https://www.legupsoftware.com/contact) [Get in touch](https://www.legupsoftware.com/contact) [![logo](https://www.legupsoftware.com/hs-fs/hubfs/Website,%20Dec%202022/Assets/logo.png?width=300&height=61&name=logo.png "logo")](https://www.legupsoftware.com) [Get in touch](https://www.legupsoftware.com/contact) - [Home](https://www.legupsoftware.com) - [Solutions](https://www.legupsoftware.com/solutions) - [For SAP Adminstrators](https://www.legupsoftware.com/expert_insights/solutions#administrators2) - [For SAP Basis Teams](https://www.legupsoftware.com/expert_insights/solutions#basis-teams2) - [For SAP Developers](https://www.legupsoftware.com/expert_insights/solutions#developers2) - [For SAP Support Teams](https://www.legupsoftware.com/expert_insights/solutions#support-teams2) - [For SAP Security Teams](https://www.legupsoftware.com/expert_insights/solutions#security-teams2) - Products - [SAP Incident Ticketing](https://www.legupsoftware.com/product-itsm-connector) - [SAP System Copy](https://www.legupsoftware.com/product-libelle-systemcopy) - [Data Anonymisation](https://www.legupsoftware.com/product-libelle-datamasking) - [iDoc Management and Monitoring](https://www.legupsoftware.com/product-libelle-edimon) - [SAP Security Vulnerability Analysis and Monitoring](https://www.legupsoftware.com/product-smartersec) - [SAP License Management and Optimisation](https://www.legupsoftware.com/product-samq) - [SAP User Role and Authorisation Management](https://www.legupsoftware.com/product-soterion) - [About](https://www.legupsoftware.com/about) - [Events](https://www.legupsoftware.com/events) - [Expert Insights](https://www.legupsoftware.com/expert_insights) - [Resource Library](https://www.legupsoftware.com/resources) - [Partners](https://www.legupsoftware.com/partners) - [Contact](https://www.legupsoftware.com/contact) [Get in touch](https://www.legupsoftware.com/contact) [SAP](https://www.legupsoftware.com/expert_insights/tag/sap) [Security](https://www.legupsoftware.com/expert_insights/tag/security) [RISE](https://www.legupsoftware.com/expert_insights/tag/rise) # SAP RISE: Don't fire your security team just yet. By [Rick Porter](https://www.legupsoftware.com/expert_insights/author/rick-porter) November 25, 2024 2 Minute Read ## SAP Rise and security I sat through a recent SAP run webinar on SAP RISE security. If I didn't know better, I'd have left believing that with RISE, SAP does it all. The systems are secure, and there is nothing further to do. Unfortunately, this is most definitely not the case. There were at least three crucial security components where the customer's significant responsibilities were left out. 1. SAP security notes application 2. SAP security risk analysis and risk remediation 3. SAP security monitoring So, let's look at these and see what the presenters could have included to better inform SAP customers looking into SAP RISE. You can check this by referring to SAP's [RISE with SAP S\_4HANA Cloud, private edition and SAP ERP, tailored option Roles and Responsibilities](https://www.sap.com/sea/about/agreements/policies/hec-services.html?search=RISE&sort=latest_desc&pdf-asset=780c2236-cc7e-0010-bca6-c68f7e60039b&page=1). ### SAP RISE security notes application Applying SAP security notes is one of the most important regular security activities an SAP team can perform. Therefore, one would expect SAP's RISE standard services to take care of the Security Notes application, and you could rest easy. However, the SAP RISE service provider isn't responsible for non-critical notes application, any associated manual activities, non-ABAP stack notes application or testing. You must arrange for these activities to be taken care of outside a standard RISE services agreement. ### SAP RISE security risk analysis and risk remediation Understanding the vulnerability status of your SAP system and remediating identified risks is another critical security measure one would expect an SAP RISE implementation to take care of. However, SAP RISE doesn't include risk analysis and risk remediation as standard SAP RISE services. SAP RISE services don't analyse and identify SAP system security risks, remediate identified risks, or provide any RFC security support. These are activities you must take care of yourself or make other arrangements. ### SAP RISE security monitoring To ensure a secure SAP RISE infrastructure, one would expect SAP RISE to include a monitoring service. It doesn't. Standard SAP RISE services don't include security monitoring, reporting on security KPI', or remediation of identified risks. Once again, you must arrange for monitoring services either with your internal team, or by other means. ## Filling in the gaps To fill in the gaps, you have several options: · Purchase a relevant Cloud Application Services package, · Raise Service Requests for your SAP RISE services provider to do the additional work, · Complete the work internally, or · Contract an AMS provider to do the work on your behalf. Therefore, you must understand what the scope of services includes, the variable nature of the services, and how you can be assured the work is done. ## Two birds with one stone Given that overall security remains your responsibility, what oversight do you need to assure yourself, your executive, and the Board that your systems are secure? Manual effort won't be good enough; there is too much to watch, and no one person can cross everything. There is a solution that can be your eyes and ears and kill two birds with one stone. That is the [smarterSec](https://www.linkedin.com/company/smartersec-gmbh/) SAP security platform. This platform automatically analyses your SAP system for known vulnerabilities and provides ongoing monitoring. It fills in a gap left by your SAP RISE service provider by way of omitted risk analysis and monitoring, and provides ongoing assurance that your SAP RISE provider, AMS partner, or internal team's security tasks are up to date. ## About us [Leg Up Software](https://www.linkedin.com/company/leg-up-software/) is an expert in SAP IT operational and infrastructure software automation solutions, including those that support SAP security activities. We know the SAP operations and infrastructure automation solutions landscape and have already done the legwork identifying the best available solutions. We have excellent relationships with many software vendors, including those providing automated SAP vulnerability analysis mentioned here, and can negotiate an evaluation process that best suits your circumstances and budget. Why not set up a time to start the conversation by putting something in our calendar? [Chat with Rick](https://meetings.hubspot.com/rick255/calendar) [![Rick Porter](https://www.legupsoftware.com/hubfs/Rick_ANZSAP.jpg)](https://www.legupsoftware.com/expert_insights/author/rick-porter) #### Rick Porter With over two decades of working within the SAP ecosystem, Rick has met and worked with SAP IT professionals from broad backgrounds and experiences. Rick knows the stresses and strains experienced by those managing SAP systems and enjoys bringing these insights and reflections into conversations. Author ## Recommended For You [![](https://www.legupsoftware.com/hubfs/image%20(6).png)](https://www.legupsoftware.com/expert_insights/security-hardening-in-sap-ecs-why-sap-note-3250501-demands-your-attention) [SAP](https://www.legupsoftware.com/expert_insights/tag/sap) [Security](https://www.legupsoftware.com/expert_insights/tag/security) [Automation](https://www.legupsoftware.com/expert_insights/tag/automation) [teams](https://www.legupsoftware.com/expert_insights/tag/teams) 2 Min Read ### [Security Hardening in SAP ECS: Why SAP Note 3250501 Demands Your Attention](https://www.legupsoftware.com/expert_insights/security-hardening-in-sap-ecs-why-sap-note-3250501-demands-your-attention) [![Rick Porter](https://www.legupsoftware.com/hubfs/Rick_ANZSAP.jpg) Rick Porter May 16, 2025](https://www.legupsoftware.com/expert_insights/author/rick-porter) [![](https://www.legupsoftware.com/hubfs/dreamstime_m_171896495.jpg)](https://www.legupsoftware.com/expert_insights/how-configuration-drift-can-put-your-sap-s/4hana-system-at-risk) [SAP](https://www.legupsoftware.com/expert_insights/tag/sap) [Automation](https://www.legupsoftware.com/expert_insights/tag/automation) 3 Min Read ### [How Configuration Drift Can Put Your SAP S/4HANA System at Risk](https://www.legupsoftware.com/expert_insights/how-configuration-drift-can-put-your-sap-s/4hana-system-at-risk) [![Rick Porter](https://www.legupsoftware.com/hubfs/Rick_ANZSAP.jpg) Rick Porter May 30, 2025](https://www.legupsoftware.com/expert_insights/author/rick-porter) [![SAP user management](https://www.legupsoftware.com/hubfs/dreamstime_l_244229849_2-1.jpg)](https://www.legupsoftware.com/expert_insights/how-many-users-have-access-to-sensitive-data-within-your-sap-systems) [SAP](https://www.legupsoftware.com/expert_insights/tag/sap) [Third-party software](https://www.legupsoftware.com/expert_insights/tag/third-party-software) [Managing SAP Systems](https://www.legupsoftware.com/expert_insights/tag/managing-sap-systems) [Security](https://www.legupsoftware.com/expert_insights/tag/security) 2 Min Read ### [How many users have access to sensitive data within your SAP systems?](https://www.legupsoftware.com/expert_insights/how-many-users-have-access-to-sensitive-data-within-your-sap-systems) As expected, the Latitude Finance announcement of the theft of 255,000 customer records was just the ... [![Rick Porter](https://www.legupsoftware.com/hubfs/Rick_ANZSAP.jpg) Rick Porter April 4, 2023](https://www.legupsoftware.com/expert_insights/author/rick-porter) ![logo-footer](https://www.legupsoftware.com/hubfs/Website,%20Dec%202022/Assets/logo-footer.png) Melbourne VIC 3001 AUSTRALIA Phone: +61 3 9000 0958 Email: [info@legupsoftware.com](mailto:info@legupsoftware.com)   [John 3:16](https://www.kingjamesbibleonline.org/John-3-16/) - [Solutions](https://www.legupsoftware.com/solutions) - [For SAP Administrators](https://www.legupsoftware.com/expert_insights/solutions#administrators2) - [For SAP Basis Teams](https://www.legupsoftware.com/expert_insights/solutions#basis-teams2) - [For SAP Developers](https://www.legupsoftware.com/expert_insights/solutions#developers2) - [For SAP Support Teams](https://www.legupsoftware.com/expert_insights/solutions#support-teams2) - [For SAP Security Teams](https://www.legupsoftware.com/expert_insights/solutions#security-teams2) - Products - [Libelle SystemCopy](https://www.legupsoftware.com/product-libelle-systemcopy) - [Libelle DataMasking](https://www.legupsoftware.com/product-libelle-datamasking) - [Libelle EDIMON](https://www.legupsoftware.com/product-libelle-edimon) - [STA ITSM](https://www.legupsoftware.com/product-itsm-connector) - [VOQUZ samQ](https://www.legupsoftware.com/product-samq) - [Arch Floe](https://www.legupsoftware.com/product-floe) - [Arch Stelo](https://www.legupsoftware.com/product-stelo) - [Leg Up Software](https://www.legupsoftware.com/about) - [About](https://www.legupsoftware.com/about) - [Events](https://www.legupsoftware.com/events) - [Expert Insights](https://www.legupsoftware.com/expert_insights) - [Resource Library](https://www.legupsoftware.com/resources) - [Partners](https://www.legupsoftware.com/partners) - [Contact](https://www.legupsoftware.com/contact) Copyright © 2023 LegUpSoftware  ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Rick Porter", "url" : "https://www.legupsoftware.com/expert_insights/author/rick-porter" }, "dateModified" : "2024-11-25T04:16:09.501Z", "datePublished" : "2024-11-25T04:16:09.000Z", "headline" : "SAP RISE: Don't fire your security team just yet.", "image" : [ "https://www.legupsoftware.com/hubfs/SAP%20RISE_Don%E2%80%99t%20fire%20your%20security%20team%20just%20yet.2024-11-25.jpg" ], "mainEntityOfPage" : { "@id" : "https://www.legupsoftware.com/expert_insights/sap-rise-dont-fire-your-security-team-just-yet", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.legupsoftware.com/hubfs/Website,%20Dec%202022/Assets/logo.png" }, "name" : "Leg Up Software" } } ```