Security & Governance

Tuesday 17 June

Keynote

Supercharge Your Modernization and Unleash the Power of Business AI

Timo Elliott, SAP

9:00 AM - 10:15 AM • 17 June

Modernization isn’t just about migrating systems—it’s about rethinking business processes to stay ahead. This session explores how AI and data integration are reshaping the modern enterprise, enabling businesses to break free from silos and create intelligent, adaptive workflows. Discover how AI is transforming organizations and workflows, and learn how to stay ahead by leveraging the latest research and proven strategies. We’ll share real-world examples and insights into what works, helping you turn migration into a powerful modernization journey.

Breakout Sessions

Case Study: Securing SAP Systems with Franke Group

Victor Andreu, Franke Group

11:00 AM - 11:45 AM • 17 June

SAP systems are the backbone of many enterprises, essential for smooth operations and strategic decision-making. However, growing cyber threats such as ransomware, compliance risks, and the complexity of interconnected environments pose significant challenges for security teams. In this session, Franke Group’s CISO will share firsthand why Cybersecurity for SAP became a strategic priority. Get a behind-the-scenes look at their implementation journey, the challenges they addressed, and the tangible benefits realized. Join this session to gain practical insights into securing your SAP landscape and making cybersecurity an enabler for business success.

You will learn how to: 

  • Secure a comprehensive landscape with vulnerability management and threat detection and response 
  • Conduct effective application security testing within SAP environments 
  • Navigate challenges from initial strategy through implementation and usage 
  • Explain and justify the costs of cybersecurity investments to key stakeholders

SAP Security Monitoring and Response: Tools for Securing Applications 

Vincent Doux, SAP

12:00 PM - 12:45 PM • 17 June

One of the biggest challenges from a cybersecurity perspective is detecting and identifying threats. In this session you will learn about effective security monitoring techniques and incident response strategies for SAP systems. We will discuss real-world examples and case studies to highlight the importance of proactive security measures. We will also explore a comprehensive set of cutting-edge techniques and strategies essential for safeguarding SAP systems. The focus will be on imparting actionable insights into effective security monitoring, ensuring that participants gain a profound understanding of the intricacies involved in securing SAP environments.

You will: 

  • Delve into the nuanced realm of incident response, providing attendees with a strategic toolkit to navigate and mitigate potential security threats efficiently. 
  • Hear real-world examples and case studies, bringing these concepts to life, and illustrating their practical application in diverse scenarios. 
  • Gain not only theoretical knowledge but also practical skills that can be directly applied to enhance the security posture of SAP systems within their organizations.

Deep Dive: The SAP Security Game 

Gabriele Fiata, SAP

1:45 PM - 3:15 PM • 17 June

Are you ready to elevate your SAP security expertise? Join us for an immersive and interactive SAP Security Game, crafted to simulate real-world security challenges faced by organizations. Participants will navigate various scenarios designed not only to test but also to enhance their strategic and technical expertise in SAP security. This active session offers an invaluable opportunity to enhance your skills in security planning, compliance management, and breach response while promoting collaboration and learning in a supportive and competitive setting. Throughout the workshop, we will engage with three critical topics including preventative security control implementation, compliance request/audit handling, and security breach response.

You will: 

  • Learn to develop and implement robust security controls to safeguard your SAP environment. 
  • Gain experience in efficiently managing and responding to compliance requests and audits with precision. 
  • Practice responding swiftly and decisively to a simulated security breach, aiming to minimize damage and ensure business continuity.

impact20: Understanding DevOps and Security in SAP BTP

Stefan Eckstein, Onapsis Europe GmbH

3:15 PM - 3:45 PM • 17 June

In today's digital landscape, where cyber threats and data protection risks are constantly increasing, the protection of business-critical SAP systems is essential. The SAP Business Technology Platform (BTP) is establishing itself as a central component of these environments. A key factor here is the SAP Clean Core approach, which SAP regards as a proven strategy for future-proof and easy-to-maintain custom code development in the cloud.

You will:

  • Hear about the shift left strategy and how it provides insights into the latest security features and best practices for implementation and maintenance in the SAP BTP environment.

Case Study: Security and Compliance for SAP S/4HANA Cloud with RISE with Bayer

Asha Vartak, Bayer

3:45 PM - 4:30 PM • 17 June

Discover how Bayer has reimagined its approach to securing Cloud ERP systems while navigating complex regulatory requirements. This session highlights their transformative journey, showcasing critical milestones in strengthening cloud security, overcoming compliance challenges, and setting a course for future advancements. Explore Bayer’s collaboration with SAP Enterprise Cloud Services, focusing on proactive risk management and innovative security solutions. Whether you’re already utilizing Cloud ERP or considering a transition, this session provides fresh perspectives and actionable strategies for maintaining security and regulatory excellence in a dynamic cloud landscape. 

You will: 

  • Learn how Bayer transformed cloud security for ERP systems while meeting complex regulatory standards. 
  • Discover key milestones in overcoming compliance challenges and implementing proactive risk management. 
  • Explore Bayer’s collaboration with SAP to drive innovative security solutions for future advancements.

What's on Your Mind - Security and Governance

4:45 PM - 5:20 PM • 17 June

In this interactive session, you set the agenda. Join SAP security specialists, industry experts, and fellow attendees for a candid, wide-ranging discussion on topics, from zero trust, access management, and data protection to the security risks that come with cloud adoption and SAP S/4HANA migrations. You’ll hear how your peers are tackling similar challenges and walk away with real-world solutions you can put into action immediately. No slide decks—just honest conversation, real questions, and expert insights.

Wednesday 18 June

SAP Cloud ERP Security: Insights and Best Practices

Gabriele Fiata, SAP

9:00 AM - 9:45 AM • 18 June

Migrating to the cloud streamlines infrastructure and system maintenance—but it also introduces new way of working with security that organizations must navigate. This session will explore security best practices for SAP S/4HANA in the Cloud and SAP’s broader cloud ecosystem. We’ll address common customer questions, offer actionable guidance, and help build trust in SAP’s approach to cloud security and compliance. Join us to deepen your understanding and strengthen your cloud security strategy.

In this session, you will:

  • Learn the fundamentals of cloud security, including the shared responsibility model for cloud ERP.
  • Explore key security features and best practices specific to SAP S/4HANA in the Cloud.
  • Gain insight into how SAP ensures product security and responds to common customer concerns in the cloud.

Case Study: Lessons from the Field: Data and Security Wins from Perfetti Van Melle’s SAP S/4HANA Migration

Marcelo Monsores, Perfetti Van Melle

10:15 AM - 11:00 AM • 18 June

This session offers a firsthand look at how Perfetti Van Melle used its global SAP S/4HANA migration as a springboard for enhancing data integrity and security. Hear how the company embedded role review, SoD risk mitigation, and GRC automation into its strategy—shifting from reactive controls to a proactive, integrated approach. Get tips for addressing data quality challenges through effective master data management, and how this ensures the new environment supports accurate, reliable operations. Come away with actionable insights and next steps to fortify your data and security foundations ahead of your own SAP S/4HANA journey. 

impact20: SAP Security 360°: From Compromise to Remediation with SecurityBridge and Microsoft Sentinel

Christoph Nagy, SecurityBridge GmbH & Alban Lajthia, Microsoft

11:15 AM - 11:35 AM • 18 June

Discover in this session how Microsoft Sentinel and SecurityBridge are redefining SAP security – from the initial incident report to complete resolution. Using a concrete customer scenario, we will demonstrate how SOC analysts and SAP security teams can identify potential risks early and efficiently initiate countermeasures through tightly integrated security data and processes. Experience live how this seamless collaboration uncovers attacks faster, thereby sustainably strengthening the protection of business-critical SAP environments.  Companies gain comprehensive transparency over their security posture through SecurityBridge's vulnerability management and ABAP code scanning capabilities, which complement Microsoft Sentinel's Solution for SAP.  This partnership enables seamless collaboration between SAP security and SOC teams, correlating SAP-specific threat landscapes with enterprise-wide ones, supported by Microsoft's AI, Security Copilot, and analytics.  Join us to explore how improved threat detection, accelerated incident response, and optimized compliance reporting can look across your entire IT ecosystem (incl. SAP RISE).

You will:

  • Discover how organizations can unify threat detection, reduce complexity, and stay ahead of risks across even the most complex SAP landscapes with SecurityBridge & Microsoft Sentinel. 

Case Study: Shaping Security in a Hybrid World: From ECC to SAP S/4HANA and On-Premise to Private Cloud

Daniel Preiser, OMV Aktiengesellschaft

1:00 PM - 1:45 AM • 18 June

As OMV transitions from ECC to SAP S/4HANA while operating across both on-premise and SAP Private Cloud environments, the company redefined its security strategy to protect a complex hybrid landscape. This session explores how OMV implemented centralized identity and access management to enforce consistent security policies and leveraged advanced tools—including SAP Enterprise Threat Detection, Configuration Validation, and System Recommendation—to proactively manage risk. Explore the architecture, components, and design of OMV’s secure SAP landscape, including how SAP Solution Manager underpins change and release processes to ensure traceable, compliant updates.

New Sessions Coming soon...