Three days. Real-world SAP strategies. Hands-on learning. A community that gets it. Don’t miss your chance to be part of it.
GRC, Security, and Controls Track
This track examines how to define identity, access, and control models that maintain security, enforce accountability, and support compliance across SAP and cloud environments.
Key learning objectives:
- Assign ownership for access, controls, and risk within shared responsibility models across SAP, hyperscalers, and system integrators
- Redesign access model and architect identity and provisioning across SAP and non-SAP systems, including federation and lifecycle management
- Establish segregation of duties aligned to redesigned processes and role structures
- Embed controls into process design and system configuration
- Mitigate risks introduced by integrations, APIs, automation, and distributed architectures
- Build a continuous monitoring framework covering security events, controls exceptions, and user activity to detect risk and maintain ongoing compliance
- Validate access controls, SoD rules, and security configurations to confirm they operate as designed before go-live
- Plan for auditability and traceability across migration phases and into steady-state operations, including evidence collection, logging, and reporting requirements
| Governing AI in SAP: Building Controls Before Go-Live | ||
|---|---|---|
AI capabilities, including SAP Joule, are being activated alongside SAP S/4HANA migrations, not after them. That means organizations need a governance framework for AI-driven processes in place before go-live, not as a follow-on initiative. This session addresses how to assess and control the risks that AI introduces into SAP workflows during migration and early operations, when control environments are already under pressure from transformation itself. Key Learning Objectives:
| ||
| Identity and Access Architecture Considerations in Your Transition to Cloud ERP and SAP S/4HANA | ||
Managing identities and access remains an ongoing challenge for customers, and operating in a hybrid landscape requires an integrated approach to provide a seamless user experience while ensuring security and compliance. Key Objectives:
| ||
| Masterclass: Deep Dive into Identity and Access Governance | ||
Get hands-on with SAP Cloud Identity Access Governance (IAG) and learn how to design roles, automate access, and enforce risk-aware policies alongside your shift to Cloud ERP. Key Learning Objectives:
| ||
| Moving from Periodic Audits to Continuous Controls Monitoring in SAP S/4HANA | ||
SAP S/4HANA migration is the right moment to rethink how controls are monitored, because the environment you are moving into is faster, more automated, and more integrated than what you are leaving behind. Quarterly sampling and manual reviews were designed for a slower system landscape; they will not keep pace with the transaction volumes and integration complexity of a live SAP S/4HANA environment. This session shows how to use migration as the opportunity to build continuous controls monitoring into your target operating model from the start. Key Learning Objectives:
| ||
| Navigating the Cloud: Understanding Shared Security and Controls Responsibilities in Your Transition to Cloud ERP | ||
Moving to the cloud introduces a new paradigm of shared responsibilities between cloud service providers (CSPs) and their customers. This shift requires a reevaluation of traditional internal controls and audit practices, and a deeper understanding of the delineation of responsibilities to ensure data integrity, security, and compliance. Key Learning Objectives:
| ||
| Security and Controls in Cloud ERP | ||
Bring your toughest questions on access, controls, audit readiness, and accountability in cloud-based SAP environments. This roundtable gives security, GRC, and controls leaders a forum to pressure-test current approaches, surface blind spots, and discuss where responsibility should sit across SAP, hyperscalers, system integrators, IT, and the business. Participants will come away with peer-tested ideas for strengthening control coverage and reducing risk as SAP landscapes become more connected and automated. | ||
| Updating Segregation of Duties in SAP S/4HANA | ||
One of the most common and costly surprises in SAP S/4HANA migration is discovering that the SoD framework built for SAP ECC no longer works. Fiori apps, flexible approval workflows, and a restructured authorization model create entirely new risk combinations, and most organizations don't find the gaps until post-go-live, when auditors do. Before your migration moves further, gain a clear picture of what breaks, why it breaks, and what to redesign early in your migration planning. Key Learning Objectives:
| ||