smarterSec Patch Impact Analyzer

Challenges

SAP releases its Security Notes every second Tuesday of the month to fix recently detected security vulnerabilities. Although it is strongly recommended that the SAP Security Notes are implemented promptly, many SAP customers struggle with this recommendation. The associated testing efforts and uncertain effects on the SAP system present most companies with major problems.

Solution overview

The smarterSec Patch Impact Analyzer makes it possible to make detailed predictions about the impact of SAP Security Notes before they are implemented.

The smarterSec Patch Impact Analyzer can be used on all SAP systems based on SAP NetWeaver AS ABAP (SAP ECC 6.0, SAP S4HANA, etc.). It analyzes the impact of a correction in the ABAP source code for every SAP Security Note that you plan to implement.

Using an automated approach, the Patch Impact Analyzer performs an in-depth analysis for each new SAP Security Note. This makes it possible to make detailed predictions about the effects or changes on the SAP system. In addition, the Patch Impact Analyzer identifies which applications need to be tested and which people are the best potential testers. This optimally supports and simplifies the SAP security patch management process for our customers, resulting in less testing effort and significant time savings.