Sep 3, 2026
•1 minute read
segregation of duties
Access Governance: The Critical Path Through Your S/4HANA Transformation JourneyS/4HANA transformation impacts the most critical applications that run a business. Any delay or deployment issue will have significant effects on the business. These can lead to disruptions, security issues, and audit findings. Many organizations assume access governance is a workstream to bolt on after the technical migration is done, or that a lift-and-shift approach […]
Six Hidden Access Risks in Modern SAP EnvironmentsModern SAP environments extend far beyond a single ERP system, and access risk has extended with them. As organizations move to S/4HANA, adopt SaaS applications and cloud platforms, and introduce AI-driven automation, critical risks increasingly emerge between systems rather than inside any one of them — across applications, identities, and end-to-end business processes. Traditional SAP […]
Aug 28, 2026
•1 minute read
Modern Identity Management for SOX: Closing Control Gaps Across SAPSolving the SoD and user administration challenge for human and agentic actors
As SOX compliance expectations continued to rise, many organizations still lacked complete visibility and control over who—and what—had access to critical SAP and SOX-relevant enterprise applications.
The root issue was structural. Enterprise IAM was designed to manage identity at scale, but SOX required access governance to operate as a financial control system aligned with financial reporting risk and audit defensibility. In modern landscapes where financial processes ran across multiple systems, access could appear compliant within individual applications while still introducing material risk across the end-to-end workflow.
KPMG’s most recent material weakness study underscored the point: among companies disclosing material weaknesses, 56% cited IT, software, security, and access issues—and 43% cited segregation of duties or control design weaknesses. These control gaps drove a rising cost of compliance. The 2025 KPMG SOX Survey reported an FY24 average program effort of 15,580 hours, with 45% of organizations reporting year-over-year cost increases. When access governance was weak by design, teams compensated with manual controls, spreadsheet-driven reviews, late-cycle remediation, and repeated audit retesting—creating friction across Finance, IT, IAM, and Internal Audit.
This session addressed the identity and access breakdowns that repeatedly surfaced in audits: disconnected joiner-mover-leaver processes that created access creep, SoD conflicts that didn’t map cleanly to financial workflows across applications, privileged access that wasn’t governed as a repeatable, auditable control, and high-volume user access reviews that generated evidence but limited assurance. The speakers also addressed a fast-growing blind spot: the lifecycle and governance of non-human identities—including service accounts, bots, and automation agents—that interacted with SOX systems without consistent ownership or enforceable boundaries.
The session included a demonstration of how identity discovery, access governance, and continuous compliance monitoring could be automated across SAP and adjacent applications using a modern identity security platform
Apr 23, 2026
•2 minute read
Segregation of Duties (SoD) Control Monitoring and Automation – Lessons from Jabil’s ExperienceJabil's journey with segregation of duties (SoD) control monitoring and automation has evolved over time to adapt to their growing landscape and compliance requirements. With the expansion of their global presence and diverse customer needs, role and access management across their manufacturing plants became a complex challenge. In 2015, they undertook a significant project to upgrade their GRC Access Control system, resulting in role redesign and standardization, along with improved SoD violation monitoring and quantification capabilities.
Jun 15, 2023
•1 minute read
Mahindra CIE Automotive Ltd. Reduces Risk and Hours of Manual Effort by Automating Its SAP User Provisioning ProcessesMahindra CIE Automotive Ltd. (MCIE), as a growing, publicly traded, international company, must follow a variety of regulations and compliance standards and undergo various statutory audits. In the first quarter of 2019, the company’s board of directors stressed the importance of putting in place stronger security and compliance controls to provide better assurance to investors and customers. With SAP ERP being the centerpiece of the company’s information stores, it is a critical component of the compliance and security strategy. Learn how MCIE reduced risk and hours of manual effort by automating its SAP user provisioning processes, thus eliminating any threat of possible violations and misuse of the system.
Nov 5, 2020
•6 minute read
Events
SAPinsider Summit New Orleans 2026New Orleans, Louisiana, United States
SAPinsider Summit Chicago 2026Chicago, IL
SAPinsider Copenhagen 2026Copenhagen, Denmark
Mastering SAP Collaborate, an SAP TechEd on Tour eventSydney, New South Wales, Australia
