Firefighting or Free-For-All? The Misuse of Emergency Access

Mansoor Siddiqui

Chapter Chapter 7 in The SAP Security Governance Handbook, 2026, pp 113-131 from Springer

Abstract: Abstract Within SAP environments, few controls embody the principle of “use only when absolutely necessary,” as clearly as the Firefighter (FF) ID. Designed as a true break-glass mechanism, Firefighter access provides temporary, high-privilege capabilities intended solely for genuine emergencies, moments when critical production issues threaten business continuity and standard authorization processes cannot respond quickly enough. By design, Firefighter activity should be rare, justified, time-bound, and subject to the highest level of scrutiny and monitoring.

Date: 2026
References: Add references at CitEc
Citations:

There are no downloads for this item, see the EconPapers FAQ for hints about obtaining it.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:spr:sprchp:979-8-8688-2727-3_7

Ordering information: This item can be ordered from
http://www.springer.com/9798868827273

DOI: 10.1007/979-8-8688-2727-3_7

Access Statistics for this chapter

More chapters in Springer Books from Springer
Bibliographic data for series maintained by Sonal Shukla () and Springer Nature Abstracting and Indexing ().