Knowledge area
System hardening
Reduce the attack surface, secure configuration and protect production.
CHANGE · System hardening
Production and transport protection
Lock down production changes and retain a configuration change trail.
CriticalStandardExtended
Configuration and review ↗
DISCL · System hardening
Information disclosure protection
Suppress unnecessary system details and protect administrative interfaces.
StandardExtended
Configuration and review ↗
FILE · System hardening
File and path access
Control access from ABAP programs to the file system.
StandardExtended
Configuration and review ↗
MSGSRV · System hardening
Message Server
Separate internal communication from client access and protect administration.
StandardConditionalCritical
Configuration and review ↗
NETCF · System hardening
Service exposure and network configuration
Restrict unnecessary services, remote calls and access to internal communication.
StandardCritical
Configuration and review ↗
NOTEST · System hardening
Test functionality in production
Remove development and testing capabilities from routine operational access.
CriticalStandard
Configuration and review ↗
OBSCNT · System hardening
Obsolete clients and tenants
Keep only the clients and tenants required for active environments.
StandardExtended
Configuration and review ↗
SCRIPT · System hardening
SAP GUI Scripting
Enable interface automation only for justified business use.
Extended
Configuration and review ↗
SECSTO · System hardening
Secure Store and keys
Protect secrets stored by the platform.
Extended
Configuration and review ↗