SAP ERP

SAP ERP is SAP's ERP system. According to the results of 2007, the share of the decision on sales in Russia (in money) approached 50%. It is used mainly in large companies.

Until 1996, SAP R/3

SAP R/3 is a platform for building ERP systems from SAP. It consists of a set of application modules that support various business processes of the company and are integrated with each other in real time:

• Financial Accounting (FI)
• Controlling (CO)
• Asset Management (AM)
• Project Management (PS)
• Production Planning (PP)
• Materials Management (MM)
• Sales and Distribution (SD)
• Quality Management (QM)
• Equipment Maintenance and Repair (PM)
• Human Resources (HR)
• Information Flow Management (WF)
• Industry Solutions (IS)
• Basic System (BC)

Only the main functions of the SAP R/3 system are listed here and the extensive capabilities of working in Internet(intranet), access of external systems to SAP R/3 logic through BAPIs (Business Application Programming Interface), etc. are not mentioned.

In 1996, they stopped marketing R. In 2005, SAP rebranded and the R/3 system began to be called SAP ERP.

Solution tasks

Managers at any given time need to know what resources they have, how effectively these resources are used, and how profiting they are. For a successful company, it is always necessary to have the latest, reliable and complete information, the analysis of which allows you to quickly respond to market changes. Enterprise Resource Management (SAP ERP) provides this information in real time. It helps to carry out operational control over all areas of the enterprise and forms a reliable base for making optimal decisions at all levels of management both at the moment and in the long term.

Enterprise Resource Management integrates comprehensive, scalable, and efficient business management software and a flexible open technology platform. This platform allows you to integrate SAP solutions with third-party systems. Management is provided with reliable information on the financial condition of the company for strategic planning and financial and economic forecasting. The huge information potential of the solution allows managers to conduct a comprehensive analysis of the company's activities in different planes and not only track results, but also control the factors affecting business performance indicators.

What is stored in SAP systems?

Finance

• Company/Group Financial Statements
• Budget documents
• Financial transactions with customers
• Financial transactions with suppliers

HR

• Item Information
• Salary information
• Experience Information
• Recruiting and other personal data

Intellectual property

• Product Development Plans
• Marketing plans
• Prototype and Concept Designs

Strategy

• Approved Company Strategy
• Strategic KPIs
• Sales strategy
• Strategy to Enter New Markets
• Development Strategy

CRM/SRM

• Customer data
• Vendor data
• Status of transactions
• Potential for future transactions with customers and suppliers

Logistics

• Transport and Goods Data
• Location of the item in warehouses
• Routes of movement of goods

Documents

• Contracts
• Product Description
• Nested documents

Security Operations Center (SOC). How to Address Data Collection

SAP Systems?]]

Development of SAP applications and SDLC. (participation of information security division

development cycle)]]

Functionality

SAP ERP provides the full functionality needed to implement self-service, analytics, financial management, human resources, operations, and enterprise services. In addition, this solution offers tools for system administration and for tasks such as user management, centralized data management and Web service management. The entire functionality of the solution is based on the SAP NetWeaver technology platform.

The Enterprise Resource Management solution includes four application areas:

• Financial Management (SAP ERP Financials)
• Human Resources Management (SAP ERP Human Capital Management, SAP ERP HCM)
• SAP ERP Operations
• SAP ERP Corporate Services

In the summer of 2011, it was reported that SAP applications based on the SAP NetWeaver 7.x architecture, such as SAP ERP and SAP Business Warehouse (BW), which received certificates for compatibility with Oracle Database 11g Release 2, can now be deployed using Oracle Exadata Database Machine X2-2 and X2-8. Oracle Exadata, with more than 1,000 installations, is a proven platform for running critical SAP business applications. Oracle Database is a database for SAP OLTP and BW applications.

Support to be completed in 2025

On December 31, 2025, SAP will complete support for SAP Business Suite, or in other words, SAP R/3, SAP ERP, SAP ECC, and other versions with all modules and submodules. SAP will then only support business applications on SAP S/4HANA.

2026: FSTEC took care of the safety of SAP solutions, 4 years of work without technical support of the manufacturer

In mid-January, FSTEC issued "Recommendations for preventing the implementation of information security threats when using SAP systems in the context of the termination of their technical support and the distribution of updates in the Russian Federation"^[1]. They provide measures to ensure the protection of products still in use by customers of the German company SAP, which has stopped technical support for Russian customers.

Since 2022, only 15-20% of Russian companies have completely abandoned SAP ERP systems, "Dmitry Khomutov, director of Ideco, shared his data with TAdviser. - In key industries such as oil and gas, steel and industrial, especially among large corporate organizations, the share of SAP use is still high at about 50%.

𝓲

Фото: BIT.Asistent

The purchase of new SAP solutions is not available, but the department cannot prohibit the operation of already deployed solutions. According to open sources, SAP products are still used by such giants as, for example, KamAZ, Severstal or Russian Railways. Even a separate SAP support market was formed, the analysis of which was recently carried out by TAdviser (see more).

As you can see, even after almost 4 years since SAP announced its departure from the Russian market, the composition of key users has not undergone significant changes, "said Airat Mukhametshin, head of Cloud Networks. - Among the reasons for this state of affairs are the absence of a full-fledged replacement on the market of domestic solutions and the technically difficult complete transition to an analogue. As a result, SAP software in various configurations still functions and is supported by both the expert community and teams directly at enterprises - such complex and multifunctional products require a separate layer of deep expert competencies "on the ground."

At the same time, the already installed products of the German manufacturer do not receive updates, which makes them vulnerable to hacker attacks. In addition, SAP solutions contain a lot of valuable corporate information, which is why they are an attractive target for hackers who have penetrated the corporate infrastructure.

Companies that began import substitution in advance and systematically, in a few years were able to significantly reduce dependence on SAP or completely abandon it, "Mikhail Timaev, head of the IT Task technical presale department, explained to TAdviser readers. - Those who follow this path gradually are still forced to operate outdated SAP systems, since their replacement requires significant time and financial costs. In such conditions, the priority is not only to maintain operability, but also to build a managed risk model and an increased level of protection.

For such companies, recommendations were developed, which are divided into the following twelve points:

1. Take an inventory and keep the installed SAP components up-to-date.
2. Organize an inventory of user accounts and service records.
3. Restrict access to unused Web services, interfaces, and SAP components.
4. Restrict access to SAP administrative interfaces and services.
5. Analyze the configuration of the security parameters of the SAP system profile.
6. Check the availability and correctness of the encryption mechanisms and the protection of all data transmission channels between SAP components and external systems.
7. Organize an inventory of access rights;
8. Track the existence of trusted connections and connections between SAP systems.
9. Ensure the inclusion and regular monitoring of mechanisms for logging and auditing security events;
10. Protect the data stored in SAP systems.
11. Regulate access control and secure development processes;
12. Secure the secure development process in SAP systems.

For the first nine of the above recommendations, there is a detailed table in the appendix of the document, which indicates safe values ​ ​ for the corresponding parameters, roles or services.

Of the technical means of protection for the implementation of the recommendations, solutions of the NGFW, WAF, SIEM classes, configuration analysis tools should be used, - commented on the list of proposed measures Alexander Shilov, head of network security at K2 Cybersecurity. - The FSTEC recommendations describe that it is necessary to audit users, implement an adequate password policy, ensure access only to those components that are actually used, tune security settings, and protect control interfaces. These are the right practices to ensure that any systems are protected at any time.

According to Dmitry Khomutov, SAP administrators are able to implement most of the recommended measures on their own. At the same time, it is advisable to supplement them with superimposed protective equipment, including solutions of the NGFW and WAF class. It will be useful to avoid directly publishing SAP services on an external network and to organize access to them through secure communication channels. In addition, it is recommended to filter calls to SAP web services and databases using specialized NGFW and WAF modules, which allows you to block attempts to exploit possible vulnerabilities.

It should be noted that the document has been worked out in sufficient detail, - Mikhail Savelyev, director of the department of information security methodology "Rostelecom," expressed his opinion to TAdviser. - This allows you to use it even in companies where competencies in the field of information security and SAP administration are limited. The measures described in the FSTEC document concern the configuration of the built-in security mechanisms of the SAP platform itself. No additional special tools are required.

At the same time, experts agree that you can't just take and replace SAP solutions with something Russian. So, according to Rimma Kuleshova, product manager at Gazinformservice, safe import substitution is, first of all, a managed process, and not a simultaneous rejection of foreign solutions. In practice, most companies are forced to operate existing systems for a long time without vendor support, which significantly increases the risks of information security and regulatory inconsistency. In such conditions, the key task is to ensure a controlled and documented security state throughout the transition phase. This is exactly what the recommendations issued by the FSTEC are aimed at.

2021

The Ministry of Digital Development refused to the subordinate research institute "Voskhod" in subsidies for the localization of SAP software

As it became known in early June 2021 Ministry of Digital Development, Communications and Mass Media of the Russian Federation , it refused to issue Research Institute "Sunrise" subsidies for localization to its subordinate. software SAP

According to the publication Businessman"," Ministry of Digital Development I saw in this project a negative impact on the development of domestic. software The office of the Deputy Prime Minister Dmitry Chernyshenko agreed with this opinion and said that the project "was not properly worked out taking into account possible risks."

The Ministry of Digital Development refused to provide subsidies for the localization of SAP software to the Voskhod subordinate research institute

As the general director of SAP CISAndrey Filatov told the newspaper, the company continues to look for opportunities to gain a foothold in the Russian market.

The Company is actively negotiating at various levels on the form of cooperation. We see interest from the Russian side - both from business and from the state, "he said.

According to partner Deloitte CIS in Alexander Ilyin, by June 2021, SAP is actually localizing itself in. Russia The company has a very stable position in the large business segment and is constantly adapting solutions to Russian specifics. This can be called localization, he explained.

CorpSoft24 CEO Konstantin Renzyaev, in a conversation with the publication, said that the idea of ​ ​ localizing SAP software received a tough market reaction. He noted that the goals of the Voskhod Research Institute in the proposed project were not entirely clear. There are domestic systems on the market, like 1C, which are not only not inferior to SAP products, but sometimes surpass them.

The idea with a subsidy for localization of SAP could only be proposed by those who do not understand the scale of the system, says information technology expert Vadim Podolny. Konstantin Renzyaev agrees that Voskhod would not have enough competencies for localization, and the company would have to attract third-party organizations, which would entail additional costs.^[2]

Research Institute "Voskhod" asks the government for subsidies to localize SAP software

The Voskhod Research Institute (Voskhod Research Institute) sent a letter to Deputy Prime Minister Dmitry Chernyshenko asking for subsidies to localize SAP software in Russia . This became known on April 19, 2021.

As Kommersant writes with reference to this appeal, Voskhod intends, together with SAP, to create a Russian ERP system that can be implemented in Rostec, Rosatom and Russian Railways. The research institute told the publication that in order to develop domestic ERP products and create new ones, it is necessary to analyze and take into account the experience of leading manufacturers. At the request of the publication, SAP refrained from informative comments on the Voskhod letter and only noted the company's readiness to localize products. SAP also called the important Russian market.

Research Institute "Voskhod" asks the Russian government for subsidies to localize SAP software

According to Ilya Massukh, director of the ANO Center for Import Substitution in ICT, SAP is trying to bypass import substitution, since the company does not intend to lose the Russian market. The expert believes that the task of localization lies with the manufacturer, and not with the state.

Here it turns out that Voskhod is asking for state money to localize the German manufacturer, he said.

Sergey Vikharev, Director of Technology Practice at KPMG in Russia and the CIS, believes that if a special center was created for the refinement of certain versions of SAP products and the transfer of rights to them, the results of the intellectual activity of such a structure could potentially be recognized by Russian software with the corresponding claims of the project for state subsidies.

The initiative of the research institute does not make foreign software Russian, and under the conditions of sanctions, foreign vendors will retain the possibility of influencing the country's economy and security, says Renat Lashin, executive director of the Domestic Software Association.^[3]

2020

Develop a module for integrating SAP ERP with the Docsvision platform

The company Docsvision"" announced on July 28, 2020 the development of a module for integration Docsvision platforms and SAP. ERP The solution allows companies to store transaction files SAP in a Docsvision archive, support seamless access to a to data single interface of the accounting system , and eliminate the use of similar imported software products. More. here

SAP: We have twice as many cloud ERP systems as Oracle

In April 2020, the co-executive director SAP Christian Klein said in an interview with the Cloud Wars blog that his company has twice as many cloud ERP system implementations as the main competitor, the American corporation. Oracle

This remark was made after in December 2019, Oracle CEO Larry Ellison, commenting on financial results, declared competitive superiority over SAP, arguing that the German company "never rewrites its ERP applications under the cloud."

SAP Co-Executive Director Christian Klein said in an interview with Cloud Wars blog that his company has twice as many cloud ERP systems as its main competitor, the American corporation Oracle

When you compare the figure of 2.3 thousand clients of our cloud ERP system with the figure of approximately 7 thousand clients, which a certain other vendor in the market is approaching, as he himself says, you should be careful. Because it's not always a comparison of the same things, "Klein said.

He explained that Oracle manipulates the numbers to look more winnable against the SAP background.

According to him, when calculating the number of cloud ERP implementations, Oracle takes into account not only the number of customers using the Oracle ERP Cloud enterprise resource management system, but also separately users of the cloud product for managing relationships with suppliers Oracle Procurement Cloud and users of Oracle HR Cloud, a cloud solution for human resources management.

Our own human resources management product, SuccessFactors, is already fully integrated into the S/4HANA Cloud cloud ERP system. And by the end of the second quarter of 2020, the platform will fully include the Ariba solution for managing supplier relationships, - commented the top manager.

If you take into account the number of customers using these two solutions separately - I will not disclose specific numbers now - today you can roughly calculate that the total number of users of cloud ERP systems in our country is almost twice as much as Oracle, "he concluded.[4]

2018: Chances of success for SAP projects are 50-50

In February 2018 consulting , Resulting IT published the results of a study stating that only half of the implementation projects software SAP can be called successful. More. here

2014: SAP ERP for Belarus

On September 17, 2014, the company EPAM Systems announced the completion of certification of its localization solution SAP for finance and logistics in the Republic. Belarus

The localization package is designed according to SAP process and methodological guidelines and is a separately installed application (Add-On) to the standard SAP ERP system. As part of the solution for setting up the main processes, forms and reports covering standard or basic processes in the field of accounting and tax accounting of the Republic of Belarus, they are in demand in any project within which a full outline of business processes is implemented.

The advantage of using the finished EPAM Systems package is that it can be adapted to the individual features of the customer, since the solution is delivered in two parts (main functionality and BC Sets settings). The solution does not depend on updates to the Russian localization package due to the use of its own groups of settings and objects for the Republic of Belarus. It is possible to install the package on existing systems.

Using EPAM will minimize the cost and timing of implementing and supporting SAP ERP projects. The reliability and sustainability of the solution brings savings in the development of the implemented system and its migration to subsequent versions. In addition, the risks of damage to the operating system are minimized, as well as the costs of regression testing are reduced.

Arkady Barkhan, Head of the Corporate Information Systems Implementation Department at EPAM Systems, said: "When creating the SAP Add-On for the Republic of Belarus, we took into account the interests of all customers operating on the SAP ERP platform. The solution was developed with the successful cooperation of EPAM Systems with SAP Globalization Services, the division responsible for localizing all SAP products, as well as with the SAP Joint Innovation Laboratory (SAP COIL). The collaboration agreement with the laboratory guaranteed EPAM intellectual property protection and ensured that the project could be worked together with SAP Globalization Services specialists based on the COIL cloud infrastructure. Our package can be used by customers who have implemented or are planning to implement SAP software starting with ERP 6.0 and with any later extension package (EHP). "

2012: SAP ERP for Kazakhstan

In early September 2012, SAP CIS introduced the first unified version of SAP ERP for Kazakhstan, developed taking into account local legal requirements. The release of this version means that SAP sees great prospects in Kazakhstan for further development and invests in the country seriously and for a long time. The localized version will be available to SAP customers in Kazakhstan for free.

At the first stage of Kazakh localization, a solution for financial management was developed, including accounting and reporting on VAT, accounting for import operations from the countries of the Customs Union, calculating corporate income tax and taxes on transport and property, as well as reporting on land tax, transport tax and property tax. At the next stage of localization, the solution will be supplemented with opportunities for maintaining primary accounting documentation and financial statements. We are also working to localize the SAP ERP HCM Human Resources solution.

The project, carried out in a record 6 months, was carried out in cooperation with ENRC, a large international holding engaged in the extraction and processing of natural resources, and the influential audit and consulting company Deloitte. This made it possible to attract the best specialists in accounting and tax accounting of Kazakhstan and experts on the SAP ERP system to participate in the project. This localization is the third in the CIS countries after Russia and Ukraine, and its creation is due to the prospects of the Kazakh market.

Notes