Overview

SECUDE and top flow enable attack-proof and GDPR-compliant download of SAP reports

With the integration of the software solutions SECUDE HALOCORE and top flow top se16XXL, the SAP add-on providers automate data security processes and provide SAP users with practical support in implementing the new General Data Protection Regulation.

Walldorf/Bad Saulgau, July 2, 2018: SECUDE, SAP partner and leading provider of data security solutions for SAP, today announced its partnership with software provider top flow from Bad Saulgau. Against the backdrop of growing cybercrime and the entry into force of the General Data Protection Regulation (GDPR (EU) 2016/679) in May 2018, the two software companies are planning a close technology and sales partnership. The aim is to support SAP customers in protecting processes that are essential for day-to-day business, such as ad hoc and custom reports, from external attacks and adapting them to the requirements of the GDPR.

Collecting personal data securely and in compliance with the GDPR

In day-to-day SAP operations, there are always new reporting requirements that are brought to IT by the business departments. In most cases, the data is compiled using table queries, such as the SAP transaction SE16/SE16n, and exported to Office applications such as Microsoft Excel for improved analysis options. This approach harbors risks for data security and makes it almost impossible to provide the proof of purpose-related access required by the new General Data Protection Regulation. Companies that cannot do without their custom reports in the SAP HR and CRM systems are now reliant on creative and quickly deployable solutions such as those from SECUDE or top flow. By using the SAP add-on top se16XXL from top flow, access control can be extended for table and table fields as well as for table content via SAP standard authorization objects.

“With top se16XXL, the security gaps in the SAP standard authorization system in transactions se16 and se16n are closed. Each employee only sees the data that is relevant to them,” explains Alexander Wiese, Managing Director of top flow GmbH, “This means that personal SAP data can be collected securely. At the same time, all security requirements stipulated by auditors and the GDPR are met.”

Process SAP reports securely and in compliance with GDPR

SECUDE HALOCORE can also be used to control the export of this data from the SAP systems. Based on automated data classification, the rights for downloading files can be defined directly and granularly, the download of particularly sensitive data can be restricted and all data transactions can be clearly tracked. The unique integration with Microsoft AIP/RMS also ensures that data protection requirements are met in all Office applications. Personal data is therefore only available to authorized persons and only for specific purposes.

“Together with our partner top flow, we are delighted to be able to offer SAP users effective immediate measures for implementing access and disclosure controls in accordance with the GDPR,” explains Holger Hügel, Vice President Products & Services at SECUDE. “HALOCORE and top se16XXL are SAP add-ons that can be implemented quickly and close two critical security gaps in SAP that prevent GDPR violations.”

---

Overview