Infrastructure Vulnerability Analysis helps identifying security weaknesses on the layer below application security. Generally speaking, infrastructure management and SAP system administration are two different worlds and there tends to be a gap of knowledge and ownership in between the two. The technical foundation of a system is a 123213. In the infrastructure vulnerability analysis, the SAP security specialists inspect the vulnerability of the installed SAP components, kernel and services for any known weaknesses. The results of this (technical) analysis help remediate the quickfixes and may disclose the gaps in administrative policy and procedures within the IT department to pro-actively manage SAP system-security at infrastructure/kernel level.