Symptom
- You have been asked to provide a Vulnerability Assessment and Penetration Testing (VAPT) certificate for SAP Datasphere.
- Or you would like to get details about security assessments.
- Or perhaps you would like to arrange a dedicated assessment for your organization.
Environment
SAP Datasphere
Cause
SAP is committed to identifying and addressing security issues that affect our software and cloud solutions. We are continuously working on improving our security processes. T
The SAP Trust Centre already contains a lot of security and compliance related information, certificates and details on how you can contact the SAP Security Department to report any suspected security breach.
Note: Please do not open a support ticket with Product Support on this topic. This topic is handled by a different SAP Department.
Resolution
- As a first step, refer to the SAP Trust Center My Trust Center (sap.com) and the security specific pages at Secure Data, Applications, and Data Centers | SAP Security.
- If you wish to request an SAP approved Penetration Test refer to the steps outlined in KBA 3080379 Customer Penetration Testing Request Process
-> Customer-Initiated Penetration Testing. - Pay close attention to the Penetration Testing Rules of Engagement document which is attached to the KBA.
- For any issues & queries concerning the penetration test requests please reach out to pentest@sap.com.
- Please reach out to secure@sap.com for remediation related queries.
See Also
Keywords
Security audit, pen test, breach, vulnerability, cve, cloud security, ISO certificate, ISMAP , KBA , DS-SEC , Security (Users, Roles) , Problem