Unused access piles up in every application — and most companies only notice when auditors do. Wieland, a 200-year-old copper manufacturer running SAP at the core of business-critical processes across 89 locations, had a GRC solution in place but still faced recurring audit findings, manual review cycles, and evidence assembled around deadlines. Christoph Morath, Senior Manager Technology & Transformation — SAP, IAM & GRC at Wieland, joins Pathlock live to unpack how they took access reviews from deadline-driven fire drills to automated, evidence-backed recertification. In a candid conversation — no product pitch — he covers what triggered the project, why Wieland rethought the approach rather than just swapping the tool, how they got busy managers to actually complete reviews, and what measurably changed after go-live. He also shares why they didn't stop at user access reviews. Attendees leave with practical, field-tested lessons for building audit-ready access controls in a complex, regulated SAP landscape.

In this session, you will:

• Learn how to turn deadline-driven SAP access reviews into automated, evidence-backed recertification campaigns
• Understand why an existing GRC tool wasn't enough — and why ownership, data quality, and business acceptance decide success more than technology
• Discover practical tactics for getting managers to actually complete reviews, and what changed for audit readiness after go-live