Exam C_SEC_2405 Topic 5 Question 25 Discussion

Security safeguards in SAP are categorized into distinct areas to ensure a holistic approach to protecting systems and data.
* Physical Safeguards (A):These include measures to protect physical IT infrastructure, such as data centers and hardware, from unauthorized access or environmental damage (e.g., CCTV, biometric access controls).
* Access Control Safeguards (B):Mechanisms to restrict access to data and systems based on user roles and responsibilities. Examples include user authentication, role-based access control, and segregation of duties (SoD).
* Technical Safeguards (D):Tools and configurations to protect digital assets, such as encryption, firewalls, intrusion detection systems, and vulnerability management.
SAP Security References:
* SAP GRC Security Framework
* SAP Note on Physical and Logical Access Safeguards
* SAP Access Control and Data Security Best Practices