SAP National Security Services. Secure Support Overview

Transcription

1 SAP National Security Services Secure Support Overview

2 SAP National Security Services (NS2) Our Organization An independent, 100% U.S. subsidiary of SAP, with more than 15 years of experience in supporting U.S. Government entities and private companies Our Mission Deliver trusted, world-class technology and services to the DHS Critical Infrastructure and US Federal, DOD and national security communities Our Customers Available for many critical infrastructure industries, including defense contractors, telecom carriers, and major financial institutions with special information assurance needs Our Workforce US Citizens with background investigations and/or security credentials 2

3 U.S. Regulatory Landscape: When to consider using SAP NS2: DHS National Infrastructure Protection Plan Various Critical Infrastructure (e.g. Telco) DoD - Export Control (ITAR/EAR/NIST) Aerospace & Defense FTC GLBA (Banking/Financial) Banking, Insurance, Financial Services DoC - NIST & Fed Info Systems Nat. Sec, Fed Civilian Gov. NERC-CIPv5/v6 DoE 10CFR810 & Nuclear Materials Nuclear Utilities IRS Federal Tax Information State & Local Governments DHS CFATS - Chemical Facilities Chemical Producers & Refiners 3

4 What we offer: Security enhanced versions of SAP Maintenance & Services SAP Secure Enterprise Support SAP Secure Product Support for Large Enterprises SAP MaxSecure (Secure MaxAttention) SAP Secure Preferred Care for Cloud Secure Services A secure version of SAP s Award Winning Enterprise Support Program A secure version of SAP s program for extremely large, complex SAP centric environments A secure version of SAP s flagship embedded support program A secure version of the SAP Enterprise Support cloud editions add-on. Secure Services with credentialed resources 4

5 SAP NS2 Security Enhancements for Maintenance Receive benefits of SAP maintenance with additional security enhancements: Integrate US credentialed support personnel if required Named U.S. citizen support advisor or technical quality manager (Secure MaxAttention) Specialized handling of sensitive data and filtering of support messages to limit exposure when needed Restricted/secure areas when viewing customer information with infrastructure isolated and air-gaped from the rest of SAP Technology control plan for customized remote access from a secure and cleared U.S. NS2 facility 24x7 Remote connection Priority 1 message support for Secure Product Support for Large Enterprises and SAP MaxSecure customers 5

6 SAP NS2 Secure Support Incident Handling Help meet cyber, compliance and data security policies Customer creates message in SAP Support Portal or Solution Manager and sends it to SAP Messages processed by SAP Global Support and Development teams. SAP Follow the Sun Support is still in effect. Messages sent back to Customer If secure remote logon required, message sent to NS2. Applicable for components requiring security. Only what needs to be locked down will be locked down. Secure Incident Handling: Message reviewed by SAP NS2 Back office for secure remote access (e.g. login, screen share, hosting a debug session). Applicable for all message component areas that requiring secure handling. Messages sent back to Customer 6

7 2017 SAP National Security Services (SAP NS2 ). All rights reserved. No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP NS2. The information contained herein may be changed without prior notice. SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP SE in Germany and other countries. 7