It seems that there is renewed interest in protecting enterprise applications (e.g. SAP). Our own Sharon Besser blogged about it, McAfee's Rees Johnson blogged about this here and there has been some commentary from Eric Kang on how PCI DSS applies to SAP here. SAP even has a list of complementary security providers (software, hardware and services) on this site (yes, Imperva is on this list as well).
Why is there so much focus on protecting applications that enterprises use to run their business? Well, if you need to ask... But seriously, do think back for a bit and see what your own applications contain. I suspect that most companies keep at least the following data:
Why is there so much focus on protecting applications that enterprises use to run their business? Well, if you need to ask... But seriously, do think back for a bit and see what your own applications contain. I suspect that most companies keep at least the following data:
- Customer names, addresses, credit references, payment history, tax ID numbers, etc.
- Employee names, social security numbers, addresses, bank account numbers (for automatic deposit of paychecks)
- Supplier/partner information (similar to customer information above)
Leave a comment