03.12.2026

• 

  14:00 - 14:45

  Beyond the Checklists: How AI Disrupts Traditional SAP Security (and How to Manage the Risk)

  Afficher la description

  • Haut-parleur

  • Markus Schumacher

    Asathor GmbH

  Descriptif

  • The Death of Traditional Audits: Why classic SAP security mechanisms and manual compliance checklists fail in the era of automated, AI-driven cyber threats.
  • The Dark Side of Smart Tech: Analyzing verified risks in platforms like SAP AI Core, and showing how unmonitored AI integration and automated coding tools introduce data leaks, credential theft, and legacy code vulnerabilities.
  • Redefining the CISO Strategy: Actionable steps for IT decision-makers to secure their SAP core while leveraging the speed and power of modern AI tools.
  • The Human Factor in Automated Systems: Why training your security operators to question AI-generated insights is the ultimate line of defense for your enterprise data.

• 

  14:45 - 15:30

  A GRC solution does not fail because risks exist — it fails when the business does not see them early enough

  Afficher la description

  • Haut-parleur

  • Andreas Knab

    Soterion

  Descriptif

  In many organisations, access risks remain hidden in IT reports, while the people approving access lack a clear business view.

  • In cloud and FUE-based licensing models, poor access decisions can become direct cost decisions. Unnecessary roles, unused authorisations and over-approved access can quickly translate into avoidable license exposure.
  • The real challenge is not having more GRC functionality, but making risk understandable for the business. Business users need clear, practical guidance before they approve access — not after costs or audit findings appear.
  • Modern GRC must connect access risk, business ownership and license impact. A usable, business-centric approach helps organisations prevent unnecessary risks and costs before they are built into the authorisation landscape.

• 

  15:30 - 16:15

  SAP Authorizations: Access Controls for CDS Views

  Afficher la description

  • Haut-parleur

  • Manfred Sprenger

    EDV-Beratung Manfred Sprenger

  Descriptif

  In S/4HANA, data access is primarily handled via Core Data Services (CDS). CDS views defined using this service are utilized in the development of ABAP applications, Fiori apps, analytical reports, and APIs.

  In addition to the classic authorization check using 'AUTHORITY-CHECK', SAP offers the option to assign access controls to a CDS view; these controls then handle the filtering of authorized data.

  This tutorial (webinar) demonstrates the impact of access controls on the authorization concept, particularly regarding tasks such as role definition and the analysis of authorization errors.

  Topics

  • What are CDS views?

  • How are access controls defined, and what needs to be considered?

  • How and where in the system does the authorization check via access controls

  take place?

  • What does "privileged access" mean?

  • How do access controls affect an authorization trace?

  • How are authorizations for access controls assigned?

• 

  16:15 - 17:00

  SAP’s New Authorization-Based Licensing: What It Means for Authorization Administrators

  Afficher la description

  • Haut-parleur

  • Franziska Schlauch

    cbs Corporate Business Solutions Unternehmensberatungs GmbH

  Descriptif

  • Get an overview of SAP’s shift to authorization-based licensing, its implications and the standard capabilities within SAP S/4HANA Core that support administrators.
  • Learn how state-of-the-art least-privilege access concepts can reduce licensing risks and unexpected cost impacts.
  • Identify potential risks in overly generous authorization assignments under the new model.
  • Understand why license-driven role adjustments must align with your authorization concept — security and functionality should never be compromised for cost savings.

• 

  17:00 - 17:45

  Maximize the Potential of Your Risk Analysis Tool

  Afficher la description

  • Haut-parleur

  • Adam Edwards

    Convista Consulting Ltd

  • Bianca Folkerts

    Convista Consulting Ltd

  Descriptif

  The presentation will discuss ideas on how an organization can benefit from using their risk analysis tool beyond its core function of identifying regulatory risks, such as:

   

  • Supporting Data Owners to identify who has access to the data they are responsible for
  • Define “Need to know” info when creating Roles
  • Supporting Risk based recertification of Roles.

• 

  17:45 - 18:30

  Building Trusted Applications and Agents on the SAP Business AI Platform

  Afficher la description

  • Haut-parleur

  • Christian Cohrs

    SAP

  Descriptif

  Discover how the SAP Business AI Platform helps you build trusted cloud applications and agents with security and compliance built in from the start. Learn how identity, connectivity, governance, and security services work together to support resilient architectures, simplify compliance, and enable secure-by-design development practices.