Apr 23, 2026
•2 minute read
SoD
Modern Identity Management for SOX: Closing Control Gaps Across SAPSolving the SoD and user administration challenge for human and agentic actors
As SOX compliance expectations continued to rise, many organizations still lacked complete visibility and control over who—and what—had access to critical SAP and SOX-relevant enterprise applications.
The root issue was structural. Enterprise IAM was designed to manage identity at scale, but SOX required access governance to operate as a financial control system aligned with financial reporting risk and audit defensibility. In modern landscapes where financial processes ran across multiple systems, access could appear compliant within individual applications while still introducing material risk across the end-to-end workflow.
KPMG’s most recent material weakness study underscored the point: among companies disclosing material weaknesses, 56% cited IT, software, security, and access issues—and 43% cited segregation of duties or control design weaknesses. These control gaps drove a rising cost of compliance. The 2025 KPMG SOX Survey reported an FY24 average program effort of 15,580 hours, with 45% of organizations reporting year-over-year cost increases. When access governance was weak by design, teams compensated with manual controls, spreadsheet-driven reviews, late-cycle remediation, and repeated audit retesting—creating friction across Finance, IT, IAM, and Internal Audit.
This session addressed the identity and access breakdowns that repeatedly surfaced in audits: disconnected joiner-mover-leaver processes that created access creep, SoD conflicts that didn’t map cleanly to financial workflows across applications, privileged access that wasn’t governed as a repeatable, auditable control, and high-volume user access reviews that generated evidence but limited assurance. The speakers also addressed a fast-growing blind spot: the lifecycle and governance of non-human identities—including service accounts, bots, and automation agents—that interacted with SOX systems without consistent ownership or enforceable boundaries.
The session included a demonstration of how identity discovery, access governance, and continuous compliance monitoring could be automated across SAP and adjacent applications using a modern identity security platform
Identity at Machine Speed: Why Access Governance Must Evolve NowIn an SAPinsider Live podcast, Manoj Makhija of Pathlock discusses how the growing complexity of enterprise applications and the introduction of AI are intensifying identity and access governance (IAG) challenges, highlighting that organizations often lack a comprehensive view of their applications and identities, which exacerbates cross-application risks and diminishes the effectiveness of access certifications.
Apr 14, 2026
•3 minute read
Cutting Through Compliance Noise: How Jabil Tackled SAP RisksWith approximately $28.9 billion in FY 2024 revenue and operations in over 100 global locations, Jabil processes millions of SAP transactions daily. For this Fortune 200 supply chain leader, ensuring Sarbanes-Oxley Act (SOX) compliance across such vast transaction volumes was a major challenge: how to detect genuine segregation of duties (SoD) violations without being overwhelmed […]
Sep 3, 2025
•3 minute read
Compliance Made Easy: Tackling ERP Audit Complexity with Saviynt’s Automated GovernanceAs compliance mandates for sensitive data management like SOX, GDPR, and HIPAA become more complex, organizations face increased risks of noncompliance and audit failures due to reliance on manual processes; however, Saviynt's automated, risk-based identity governance platform simplifies these challenges by enforcing least-privilege access, automating compliance reporting, and providing real-time analytics to enhance governance and reduce audit preparation time.
Apr 30, 2025
•3 minute read
Securing Your ERP: How Saviynt Simplifies Identity and Access GovernanceSaviynt enhances the security and compliance of ERP systems like SAP, Oracle, and Workday by automating identity governance and enforcing least privilege access, thus reducing risk and ensuring organizations maintain control over sensitive data amid increasing regulatory pressures and cyber threats.
Apr 9, 2025
•2 minute read
Understanding and Deploying Continuous Control Monitoring with PathlockSAPinsider Vegas 2025 will gather industry leaders to explore how Continuous Controls Monitoring (CCM) can transform financial oversight, enhance compliance, and address operational inefficiencies through automation in SAP environments.
Mar 14, 2025
•2 minute read
Simplifying SAP Security Management with the Xiting Security Platform (XSP)Xiting has launched the Xiting Security Platform (XSP), a cloud-based solution that transforms SAP security management by offering centralized identity management, real-time threat detection, cross-system risk analysis, and license optimization, helping businesses streamline their security operations and respond effectively to evolving cybersecurity threats.
Jan 28, 2025
•4 minute read
Interactive Roundtable: Taking the First Steps in SoD And Access Risk ManagementRight now, organizations are under more pressure than ever to understand the importance of Segregation of Duties (SoD) and critical access rulesets in order to adhere to changing compliance regulations. At the same time, technology has advanced to the point of supporting businesses who seek to streamline audits and access management by automating existing compliance […]
Mar 11, 2021
•1 minute read
Mahindra CIE Automotive Ltd. Reduces Risk and Hours of Manual Effort by Automating Its SAP User Provisioning ProcessesMahindra CIE Automotive Ltd. (MCIE), as a growing, publicly traded, international company, must follow a variety of regulations and compliance standards and undergo various statutory audits. In the first quarter of 2019, the company’s board of directors stressed the importance of putting in place stronger security and compliance controls to provide better assurance to investors and customers. With SAP ERP being the centerpiece of the company’s information stores, it is a critical component of the compliance and security strategy. Learn how MCIE reduced risk and hours of manual effort by automating its SAP user provisioning processes, thus eliminating any threat of possible violations and misuse of the system.
Nov 5, 2020
•6 minute read
Events
SAPinsider Summit New Orleans 2026New Orleans, Louisiana, United States
SAPinsider Summit Chicago 2026Chicago, IL
SAPinsider Copenhagen 2026Copenhagen, Denmark
Mastering SAP Collaborate, an SAP TechEd on Tour eventSydney, New South Wales, Australia
