Webclass 86: Data analytics for SAP security audits

Q1. Where can we see if the SAP system is set to production or not?

Q2. Why might we be interested in looking at permitted posting periods?

Q3. From which table can we get all of the security parameter information from?

Q4. Where can we see if there are users that logon without kernel access?

Q5. Which program tells us if default passwords have been changed?

Q6. Which parameter tells me if security audit is enabled?

Q7. Which parameter tells me if automatic users can use SAP?

Q8. How can I find out which objects and authorizations a user has?

Q9. How can I see if a user is locked?

Q10. How can I see if the user is in the SUPER user group?

Q11. Are users with USTYP = S real people?

Q12. What do sensitive profiles often start with?

Q13. Can authorization checks be switched off for particular objects or transaction codes?

Q14. Which objects could give access to directly update business tables?

Q15. Should anyone have S_DEVELOP in production?

Q16. Where can I find the list of combinations of sensitive authorizations set up in the system?

Q17. Which table has authorization groups for tables?

Q18. Which table has authorization groups for programs?

Q19. Why would I be concerned if a program is considered 1 Executable in TRDIR?

Q20. Which field tells me if the program is a customer program?

Q21. Where can I see if the program is assigned to an authorization group?

Q22. Where can I see changes to system tables?

Q23. Where can I see rules about changes to tables?

Q24. Which report shows me changes to banks?

Q25. If someone updates data using SE16N, where might I see this update?

Q26. Which transaction codes can be used to alter whether or not transports are logged?

Q27. Which table lists out all the transports?