This is one of the simplest ways access creep happens. Someone moves from one department to another. They receive the access required for the new...

I've seen SoD exercises generate enormous numbers of findings. Hundreds. Thousands. Sometimes far more. And technically, the report may be correct....

I don't believe the goal of SAP security should be to eliminate sensitive access. That wouldn't be realistic. People need to perform critical...

A role can look perfectly reasonable on paper. The name makes sense.The assignment was approved.The user clearly needs it. And yet the real issue...

When reviewing SAP access, people naturally look at roles. Which roles does the user have? Are the roles approved? Does the role name make sense?...

Dormant accounts are easy to categorize as a cleanup problem. An account hasn't been used. Someone should probably remove it. Put it on the backlog....