SAP Bank Communication Management (incl.

SAP Integration Package for SWIFT)

This guide does not replace the administration or operation guides that are available for productive operations.

Target Audience
Technology consultants Security consultants System administrators This document is not included as part of the Installation Guides, Configuration Guides, Technical Operation Manuals, or Upgrade Guides. Such guides are only relevant for a certain phase of the software life cycle, whereas the Security Guides provide information that is relevant for all life cycle phases.

Why Is Security Necessary?

With the increasing use of distributed systems and the Internet for managing business data, the demands on security are also on the rise. When using a distributed system, you need to be sure that your data and processes support your business needs without allowing unauthorized access to critical information. User errors, negligence, or attempted manipulation of your system should not result in loss of information or processing time. These demands on security apply likewise to the SAP Bank Communication Management. To assist you in securing the SAP Bank Communication Management, we provide this Security Guide.

About this Document

The Security Guide provides an overview of the security-relevant information that applies to the SAP Bank Communication Management including the SAP Integration Package for SWIFT. The complete solution consists of the following components: SAP Bank Communication Management is responsible for the creation and approval of batches, payment status monitor, and bank statement monitor. SAP Bank Communication Management is an integrated part of SAP ERP Financials. For more information about security-relevant information for SAP ERP Financials, see in SAP ERP Central Component Security Guide the general chapters and the chapters under Accounting Financial Accounting. SAP Integration Package for SWIFT is the File Interface to Swift Gateway. The SAP Integration Package for SWIFT is a software package that is part of SAP NetWeaver PI technology. XI Mapping to ISO 20022 messages In addition to SAP software, the connection to the SWIFTNet requires additional services from SWIFT, such as SWIFT Software and SWIFT Membership. For more information, see http://www.swift.com under Customers Corporates.

Before you start

Fundamental Security Guides
The generic business process Processing Outbound Payments using Bank Communication Management of the SAP ERP application is extended by functions to use an integration to SWIFT. SAP Integration for SWIFT includes the software component version SWIFT 602, which consists of a file interface to the Swift Gateway.

SAP Integration for SWIFT is installed on systems using the SAP NETWEAVER 7.0 J2EE Adaptor Engine (PI/XI), which is part of SAP NW process integration of the SAP ERP 2005 product version. A complete installation requires XI Content Packages, which include the XI Mapping to ISO 20022 messages. For more information, see SAP Community Network Wiki athttps://wiki.sdn.sap.com/wiki/display/Espackages/Bank+Communication+Management. Therefore, the corresponding Security Guides also apply to the SAP Bank Communication Management. Pay particular attention to the most relevant sections or specific restrictions as indicated in the table below. Fundamental Security Guides
Scenario, Application or Component Security Guide SAP NetWeaver Security Guide SAP NetWeaver Process Integration Security Guide Most-Relevant Sections or Specific Restrictions

For a complete list of the available SAP Security Guides, see the SAP Service Marketplace athttp://service.sap.com/securityguide.

Important SAP Notes

The most important SAP Notes that apply to the security of the SAP Bank Communication Management are shown in the table below.
Title Collective note: Security of Bank Accounting (FI-BL) Encrypting credit card data Back-end signature for data medium BCM: Backend signature for data medium Using the digital signature in the R/3 system SAP Note 1515185 633462 1144603 1153053 86927

For a list of additional security-relevant SAP Hot News and SAP Notes, see also SAP Service Marketplace athttp://service.sap.com/securitynotes.

Configuration
You can find a summary of the configuration steps for implementing security for the SAP Bank Communication Management in the SAP Solution Manager, under Organizational Areas Financials Processing Outbound payments using Bank Communication Management. For more information about configuration, see the Configuration Guide for SAP Integration Package for SWIFT and the Installation Guide for SAP Integration Package for SWIFT attached in SAP Note 1064419.

Additional Information
For more information about specific topics, see the addresses on the SAP Service Marketplace as shown in the table below.
Content Security Security Guides Related SAP Notes Quick Link on SAP Service Marketplace or SDN

http://sdn.sap.com/irj/sdn/security http://service.sap.com/securityguide http://service.sap.com/notes http://service.sap.com/securitynotes http://service.sap.com/pam http://service.sap.com/securityguide

Released platforms Network security

SAP Solution Manager SAP NetWeaver

http://service.sap.com/solutionmanager http://sdn.sap.com/irj/sdn/netweaver