RISE Security Questions

Hi,

Working with a lawsuit who would similar to recognize a spot much astir the information aspects of RISE, could anyone assistance with the pursuing please:

1, Are the SAP PEN Testing reports disposable to the lawsuit and is determination thing omitted - oregon are they wholly transparent ?

2, Do SAP usage generic accounts to log into lawsuit 000 successful RISE S/4HANA oregon named idiosyncratic ?

3, What level of Ransomware is included successful the SAP extremity to extremity monitoring process successful the Trust Centre with RSIE, is it portion of the Malware software?

4, How agelong are the information logs kept for - what are the retention times breached down by each information log?

Thanks

Tim