## 13.3.4.2.7.35  Country/Region-Specific Features: USA
Overview of security-relevant information for payroll and personnel administration for the country/region version for USA.
## Important SAP Notes
The following table presents the most important SAP Notes regarding security for the country/region version for USA (PA-PA-US, PY-US).
<!-- image -->
| Title                                         |   SAP Note | Comment   |
|-----------------------------------------------|------------|-----------|
| Tax Reporter Transaction and Spool Se- curity |     430595 |           |
## Authorizations
The country/region version for USA uses the standard authorization concept used by SAP S/4HANA. Therefore, the recommendations and guidelines for authorizations as described for SAP S/4HANA also apply to the country/region version for USA.
## Standard Authorization Objects
The country/region version for USA uses the security-relevant authorization objects that are available for Personnel Management and Payroll.
For more information, see the following:
- Authorizations (Personnel Management)
- Authorizations (Payroll)
The following table shows the security-relevant authorization objects that are also used in the country/region version for USA.
Country-Specific Authorization Objects
| Authorization Object   | Field                                                             | Value   | Description                   |
|------------------------|-------------------------------------------------------------------|---------|-------------------------------|
| P_USTR                 | ACTVT (Activity) PERSA (Personnel Area) BTRTL (Personnel Subarea) |         | Authorizations for Tax Report |
## Communication Channel Security
The following table shows the communication paths that the country/region version for USA uses, the protocol used for the connection, and the type of data transferred.
| Communication Paths                  | Protocol Used   | Type of Data Transferred                          | Data Requiring Particular Protection   |
|--------------------------------------|-----------------|---------------------------------------------------|----------------------------------------|
| BSI TaxFactory for tax calcu- lation | RFC             | Tax data for the country/re- gion version for USA |                                        |
| BSI TaxFactory™ SaaS                 | HTTPS           | Tax data for the country/re- gion version for USA |                                        |
You can use Secure Network Communications (SNC) to protect RFC connections.
##  Recommendation
We strongly recommend that you use secure protocols (SSL, SNC) where possible.
For more information, see the ABAP Platform Security Guide under Transport Layer Security.
## Communication Destinations
You can exchange data with local servers or terminals for the VET and EEO reports for the country/region version for USA. You can use this function to download files from the application server to a presentation server. You then receive the text files required by the authorities with the output format .txt . This output format complies with the law.
The data is not encrypted in the standard system. It is your decision as to the level of encryption that you want to use if you want to send the data to the Federal Commission or Department of Labor.
The following table presents an overview of the communication destinations that the country/region version for USA uses.
Communication Destinations
| Destination          | Provided                           | Type                                               | Description                                                          |
|----------------------|------------------------------------|----------------------------------------------------|----------------------------------------------------------------------|
| BSI                  | For country/region version for USA | RFC with the function mod- ule PAYROLL_TAX_CALC_US | PAYROLL_TAX_CALC_US_50 PAYROLL_TAX_CALC_US_60 PAYROLL_TAX_CALC_US_70 |
| BSI TaxFactory™ SaaS | For country/region version for USA | Consumer Proxy                                     | SOA Manager Consumer Proxy CO_HRCUSCL_T11_BSITF11 SERVICE            |
## Data Storage Security
For general information about data storage security in Payroll, see Data Storage Security .
The following contains specific information about the logical file names and path names for Payroll USA (PY-US).
## Logical File Names Used in Payroll USA
The following logical file names were created to facilitate the validation of physical file names:
Logical File Names and Reports
| Logical File Name   | Reports That Use These Logical File Names   |
|---------------------|---------------------------------------------|
| HR_US_TR_XML_SCHEMA | RPCTRTU1_XML                                |
## Logical Path Names Used in Payroll USA
The logical file names listed above all use the logical file path HR\_US\_TR .
## Particularly Sensitive Data
The Human Resources infotypes often contain sensitive data. This data is protected by central authorization objects. For the country/region version for USA, this includes the social security number (SSN number) in the infotype Personal Data (0002).
## Other Security-Relevant Information
You can use the interface toolbox (transaction PU12 ) to update the taxability model. Currently, there are no special authorizations for this. For more information about the interface toolbox, see section Security for Additional Applications under Payroll .
You have the following options to prevent unauthorized or unintentional updates of the database PCL4 :
- You can use the feature UTXSS to activate and deactivate the authorization checks for the tax report.
- You can use the feature UTXSP to specify codes for spool authorizations depending on the tax company and the tax class.
For more information, see the documentation of the features in the SAP S/4HANA system.
## More Information
See Payroll (PY) in the S/4HANA Security Guide for Human Resources.