Submitting Customer Vulnerability Assessment

request via SAP Support Portal

Contents
REQUIREMENT FOR SERVICE REQUEST ................................................................................................ 2
INSTRUCTIONS TO CREATE SERVICE REQUEST .................................................................................. 2
INSTRUCTIONS TO FILL SERVIE REQUEST ............................................................................................ 3
FAQ ............................................................................................................................................................... 5
“Service Requests: Cloud” tile missing ................................................................................................... 5
Vuln. Mgmt – template not found .............................................................................................................. 6
No Customer assignment / Tenant not found .......................................................................................... 6
Customer vulnerability assessment testing requests are now processed via the Service Requests located
in SAP for Me https://me.sap.com/servicerequest or ONE Support Launchpad
https://launchpad.support.sap.com.

REQUIREMENT FOR SERVICE REQUEST

1. Customer needs to sign in with S User ID

2. Enter request via the ‘Service Requests: Cloud' tile for ONE Support launchpad or directly access
service request via https://me.sap.com/servicerequest for SAP for Me users.

INSTRUCTIONS TO CREATE SERVICE REQUEST

1. Open Service Request window and click NEW button as seen below.
 2. Choose Vuln. Mgmt. in ‘Select a Template’ and choose
Authorization for Application Testing – applications or environment other than ECS and
Authorization for ECS-application testing – for ECS application / environment.

3. Complete online request form and submit request for approval.

INSTRUCTIONS TO FILL SERVIE REQUEST

Cloud Area: Select the tenant or application on which penetration test or vulnerability assessment is
planned.

Requestor Contact Name: Provide Name, Email address, Contact number of the requestor.

Pen Tester Name: Provide Name, Email address and Contact number of penetration tester or auditor.

Test Duration: Provide number of days of scheduled penetration test or vulnerability assessment.

Start Date of Testing: Provide state date of schedule penetration test. Ensure you refer cloud area specific
restriction in “Penetration Testing Rules of Engagement.pdf” in attachment section.

End Date of Testing: Provide end date of scheduled penetration test.

Source IP Address: Provide source IP from which penetration test or vulnerability assessment is
performed. Please note: HEC request needs private IP or hostname if pentest is planned internally. All other
applications need a public IP.

Target IP Address/URL: Provide url of application which is in scope of penetration test. Please note: HEC
request needs list of private IP or hostnames which are part of scope.

Detailed Description of planned testing: Provide methodology, scope and details regarding the type of
testing performed, tools used and timeframe if business hours.

Additional Information: If you have any more details to be shared you can attach a pdf, doc etc
documents.
FAQ

“Service Requests: Cloud” tile missing

When the 'Service Requests: Cloud' tile is missing, as seen below, what should customer do?

1. Find if 'Service Requests: Cloud' tile by scrolling down to Cloud – Administration section. If so, just open
up the tile.

2. Otherwise, add ‘Service Requests: Cloud‘ tile by:

2.1. click Personalize Icon:

2.2. Look up Service Requests: Cloud tile and add to Home screen
Vuln. Mgmt – template not found

In Service Request tile if Vuln. Mgmt template is not found your S-user account does not have enough
permissions to create a service request or access Vul. Mgmt. Please reach out to Super admin to grant
below said permission to S user.

• SRV_CREA == Create Service Requests

• SRV_BIL_AD == Create Billable Service Requests

No Customer assignment / Tenant not found

Please contact the Customer Support Team by the one of the following ways: -

Option 1: Create incident

• Please create customer support incident and they will assist you further:
• https://launchpad.support.sap.com/#/incident/create
• Please enter ERP customer number () and select S-user ()
• PS: Here on this website, you can find useful video demo on how to create the incident:
https://support.sap.com/en/my-support/product-support.html

Option 2: To get various support options such as “Expert Chat “, “Written Incident, Schedule an Expert” to
resolve your customer’s queries/issues quickly.
• Please click on “Contact Us” at the bottom left corner in the URL -
https://launchpad.support.sap.com/
• Click on “Expert Chat” - https://launchpad.support.sap.com/#/expertchat/entry
• Select Other & click on Agree
• Put your request as “Re-set credentials or relevant requests” under Subject and provide
details like VB order ID, Contact Person IT etc under Description & relevant details.
• Click on Launch chat

Please reach out to pentest@sap.com if any further queries.