Ertunga Arsal, Cissp-Issap Email & Phone Number

Founder of Enterprise Security and Compliance (ESNC), a company which offers SAP SIEM integration with QRadar, Splunk, and ArcSight and SAP vulnerability management solutions. ESNC is publicly acknowledged by SAP for discovery of over 100 security vulnerabilities affecting critical business applications. ESNC's SAP specific vulnerability assessment and real-time user behavior analytics tools allows large enterprises to:- perform SAP audits • SAP vulnerability assessments • SAP penetration tests - integrate with SIEM • detect SAP specific breaches to customer data • payroll information in real-time- find process gaps • compliance issues (SoX, GDPR, NERC CIP, ISO27001, PCI-DSS, GLBA, HIPAA)- and mitigate SAP security issues. ESNC's enterprise solution "Security Suite"​ is SAP certified. Many large enterprises including SAP rely on ESNC's technology to protect their systems against attackers. It is available as a Managed Security Service, SaaS and on-premise solution. The security issues discovered by ESNC's research affects energy, automotive, banking and many other SAP industry solutions and SAP's security solution SAP GRC.Ertunga is a pentester, lecturer and speaker at more than 20 security conferences incl. BlackHat and Defcon. He consults organizations such as U.S. Department of Justice as a subject matter expert for SAP security. ===Expertise- SAP security best practices- Risk management and compliance===Some of the SAP security vulnerabilities ESNC discovered, and the patch IDs released by SAP are: [1902611] All Industries - Decryption of SAP Usernames and Passwords [1902986] SAP Customer Relationship Management (CRM) - SoD Bypass [1779317] SAP Human Resources - Arbitrary Program Execution [1873131] SAP Oil & Gas Industry - ABAP Code Injection [1860258] SAP Automotive Industry - Privilege Escalation[1788426] SAP Banking - Remote Code Injection [1851835] SAP Utilities, Public Sector, and Telco Industries - Privilege Escalation

Listed skills include Sap Security, Vulnerability Assessment, Enterprise Security, Security, and 18 others.