Jul 21, 2026
•3 minute read
SAP security
What Six Months of Patch Days Show About SAP SecuritySAP’s H1 2026 Patch Days reveal five priorities for CISOs heading into the rest of the year: map exposure across the SAP estate, govern trusted pathways, extend oversight into the software supply chain, assign remediation ownership, and define the evidence required to close risk.
Pathlock and NTT DATA Business Solutions Launch Always-On Managed SAP Cybersecurity ServicePathlock and NTT DATA Business Solutions have launched a global managed SAP cybersecurity service that embeds Pathlock’s AI-native application controls into NTT DATA Business Solutions’ SOC operations. The partnership targets midmarket and lower large enterprise SAP customers that need continuous threat monitoring, governance support, and Clean Core-certified security coverage during SAP S/4HANA migration.
Jun 17, 2026
•3 minute read
Audit Finds NIST Mismanaged the NVD, Leaving SAP Security Teams ExposedA federal audit of NIST’s National Vulnerability Database confirms governance failures behind the NVD backlog, raising new questions for SAP security teams that rely on CVE enrichment to prioritize patching and vulnerability risk.
Jun 3, 2026
•4 minute read
How to Turn SAP Logs into SOC-Ready Intelligence in SplunkSAP logs can give SOC teams critical visibility into user activity, privilege changes, configuration changes, and business process risk. Layer Seven Security’s Cybersecurity Extension for SAP prepares SAP security events before they reach Splunk, helping analysts work with structured findings instead of raw log data.
May 28, 2026
•3 minute read
SAP Security Patch Day May 2026 Shows Risk Beyond Core ApplicationsSAP Security Patch Day May 2026 shows why SAP teams need to look beyond core applications and severity scores. Critical vulnerabilities affected SAP S/4HANA and SAP Commerce Cloud, while Mini Shai-Hulud brought developer tooling, credentials, and supply-chain exposure into the SAP security conversation.
May 14, 2026
•5 minute read
SAP Security and GRC Face an Execution ChallengeMindFore CEO Laxman Bolineni says SAP security and GRC have moved closer to SAP strategy, but customers now face a harder execution challenge as access control, cloud applications, SAP BTP, identity services, and global delivery models reshape governance.
May 12, 2026
•4 minute read
Mini Shai-Hulud Shows Why SAP Developer Tools Need Security OversightMini Shai-Hulud exposed how SAP development tools, npm packages, credentials, and CI/CD workflows can become part of the SAP attack surface. The incident shows why SAP security teams need stronger oversight of the software supply chain used to build, extend, and connect SAP applications.
May 6, 2026
•4 minute read
Modern Identity Management for SOX: Closing Control Gaps Across SAPSolving the SoD and user administration challenge for human and agentic actors
As SOX compliance expectations continued to rise, many organizations still lacked complete visibility and control over who—and what—had access to critical SAP and SOX-relevant enterprise applications.
The root issue was structural. Enterprise IAM was designed to manage identity at scale, but SOX required access governance to operate as a financial control system aligned with financial reporting risk and audit defensibility. In modern landscapes where financial processes ran across multiple systems, access could appear compliant within individual applications while still introducing material risk across the end-to-end workflow.
KPMG’s most recent material weakness study underscored the point: among companies disclosing material weaknesses, 56% cited IT, software, security, and access issues—and 43% cited segregation of duties or control design weaknesses. These control gaps drove a rising cost of compliance. The 2025 KPMG SOX Survey reported an FY24 average program effort of 15,580 hours, with 45% of organizations reporting year-over-year cost increases. When access governance was weak by design, teams compensated with manual controls, spreadsheet-driven reviews, late-cycle remediation, and repeated audit retesting—creating friction across Finance, IT, IAM, and Internal Audit.
This session addressed the identity and access breakdowns that repeatedly surfaced in audits: disconnected joiner-mover-leaver processes that created access creep, SoD conflicts that didn’t map cleanly to financial workflows across applications, privileged access that wasn’t governed as a repeatable, auditable control, and high-volume user access reviews that generated evidence but limited assurance. The speakers also addressed a fast-growing blind spot: the lifecycle and governance of non-human identities—including service accounts, bots, and automation agents—that interacted with SOX systems without consistent ownership or enforceable boundaries.
The session included a demonstration of how identity discovery, access governance, and continuous compliance monitoring could be automated across SAP and adjacent applications using a modern identity security platform
Apr 23, 2026
•2 minute read
Tax Season Scams 2026: What SAP Finance and Payroll Teams Need to KnowTax season scams in 2026 are expanding beyond individual taxpayers into enterprise risk. IRS impersonation, phishing messages, and AI-enabled tactics are targeting SAP finance, payroll, and tax workflows, exposing sensitive data and system access points.
Apr 15, 2026
•3 minute read
Popular Insights
Events
SAPinsider Summit New Orleans 2026New Orleans, Louisiana, United States
SAPinsider Summit Chicago 2026Chicago, IL
SAPinsider Copenhagen 2026Copenhagen, Denmark
Mastering SAP Collaborate, an SAP TechEd on Tour eventSydney, New South Wales, Australia
