Let's Talk Data Security

Shared by our experts
2 minute read

Date Scrambling on Infotype 41 Date Specifications

Oct 1, 2019 6:46:49 AM

Every implementation of our software can throw up unique test data masking requirements. In this blog, one of our senior consultants Adan Willemse explains how Infotype 41 data had to be accurately masked in the test system, without devaluing the quality of the test data. In years gone by, this would have had us reaching for the ABAP exit functionality to code a solution, but with Data Secure 3, powerful masking rules can be built by anyone with knowledge of the data model, without the need for programming skills.

- Paul Hammersley, VP of ALM Portfolio at EPI-USE Labs

Infotype 41 challenges

SAP HCM customers are familiar with the Infotype 41 Date Specifications screen that stores many of an employee's key dates. We have blogged about the challenges of working with this infotype in the past from a reporting standpoint (see this blog about Fixing duplicate line reporting in SAP HCM).

2 minute read

It’s a tricky balance: what CAN and MAY you test?

Jul 1, 2019 4:54:42 AM

You MAY not do testing with personal data...and many people say they CAN not do testing with anonymised data. But there is a balance between the two; you are both allowed to and able to do testing with data which is both realistic and scrambled.

The General Data Protection Regulation (GDPR) that came into effect in May 2018 has changed the world’s view on data privacy. Every organisation that is either doing business with European Union citizens, or based within the EU, has spent many hours on the topic. It has changed the way we think about and act on personal data, from both a personal and business view.

4 minute read

GDPR and POPIA: Data breach

Nov 28, 2018 7:23:42 AM

Missed the previous articles?  Read them here: Article 1 | Article 2 | Article 3 | Article 4 | Article 5 | Article 6 | Article 7 | Article 8

Breaches happen, and they will happen to you.  In the ninth and final article of this series, we look at how GDPR and POPIA treat data breaches. Read on:

6 minute read

GDPR and POPIA: Data destruction

Nov 14, 2018 7:23:43 AM

Missed the previous articles?  Read them here: Article 1 | Article 2 | Article 3 | Article 4 | Article 5 | Article 6 | Article 7

Deleting data is never as simple as pressing a button. In this eighth article on GDPR and POPIA we look at the requirements and complexities of data deletion. Read on:

5 minute read

GDPR and POPIA: Data transfer

Oct 29, 2018 2:48:24 AM

Missed the previous articles?  Read them here: Article 1 | Article 2 | Article 3 | Article 4 | Article 5

In a connected world, it is too easy for personal data to move across borders. In the sixth article in our series, we look at how GDPR and POPIA treat cross-border transfers. Here is what we'll discuss:

1 minute read

What does GDPR mean for global companies?

Mar 6, 2018 1:31:14 PM

Gartner predicts that by the end of 2018, more than 50 percent of companies affected by GDPR (the General Data Protection Regulation) will not be in full compliance with its requirements. Having been contacted recently by a number of global clients about GDPR, I’ve realized that there’s still a misconception that GDPR only applies to companies based in the UK or Europe.  

2 minute read

Protecting consumers: why is GDPR so important?

Jan 9, 2018 6:30:08 AM

Over the festive period, I’ve spent far more time in shops and watching telly than I normally would (and probably should). A couple of things jumped out at me which made me realise the importance of protecting our personal preferences and choices. This may sound like ‘bah humbug’ ranting – but it will come to a point, I promise.

2 minute read

Three ways to protect your SAP data from cyber criminals

Dec 15, 2017 1:43:20 AM

Reduce your attack surface
Security budgets have tripled in the past few years. Yet this is not enough to prevent data breaches. In 2016 alone, over 2 billion records were stolen; hacking expertise is escalating, and there are threats everywhere.  

1 minute read

GDPR: the Data Adequacy and Data Minimisation principle

Nov 23, 2017 6:16:57 AM

The Data Protection Act (current law) requires companies to ensure that they only collect the personal data they need for the purposes they have specified. They are also required to ensure that the personal data they collect is sufficient for the purpose for which it was collected.

1 minute read

Retention period: A minimum or a maximum?

Nov 3, 2017 12:33:38 PM

GDPR: are retention periods being considered a minimum or a maximum?

I’ve recently been in several meetings where a Data Protection Officer (DPO) or internal legal advisor has been discussing GDPR with IT team members. Interesting to see people with very different backgrounds and responsibilities discussing the various challenges of GDPR they are facing jointly. Several of the DPOs were keen to stress that a lot of the elements affected by GDPR are already in force as a result of existing country legislation created to comply with  the 1995 Data Protection Directive. For them, GDPR was in many ways welcome, because it’s ensuring that organisations take their obligations very seriously - even if those obligations are already there now, but have perhaps been overlooked.