Questions To Ask Before Moving your SAP environment to the Cloud

Understand how the cloud provide both secures your application and the data within the application. It is import to understand that security ‘access’ to applications is different than securing the data itself.

You should expect to retain end-to-end, lifecycle control over how your data flows and how it is physically stored. When data is created, there should be a customer-controlled system for capturing the content. During the midlife of the content, controls are needed to capture the edits and changes made by various authorized users. And at the end of the lifecycle, controls are needed to ensure that the content is properly archived or wiped (destroyed).

Be sure you know how your cloud provider responds to security incidents. While some cloud providers might not provide incident response services, you may be able to acquire these services from a third party, including a different cloud provider.

Ideally the cloud applications should integrate to backend systems via a VPN application. The communication between the cloud and backend needs to be, both authenticated and encrypted.

SAP has an advantage over other provides in that it provides the SAP Cloud Connector. The SAP CC is a VPN application which securely connects backend SAP systems to the SAP Cloud Platform. It is able to do this without openning ports in existing firewalls.

Be cognizant of that fact that cloud provides do have physical locations where your data is stored. ( No they are not really floating in the sky ! ). If you are concerned with privacy laws in specific locations, make sure that your provider allows you to host your applications in specific geographic locations,.