Cybersecurity is no longer just an IT concern — it’s a business imperative. In a world of increasing regulatory pressure, AI-powered threats, and complex digital ecosystems, SAP environments remain high-value targets for cyberattacks. Yet many organisations still struggle to translate technical risks — such as unpatched vulnerabilities, excessive user access, and insecure integrations — into board-level conversations that drive action. Learn how to reframe SAP security from reactive protection to proactive value creation. Explore how to quantify risk in business terms, align with executive priorities, and build security strategies that support trust, compliance, and business continuity. With real-world insights from global operations and transformation programs, you'll leave with a practical framework for elevating cybersecurity to a strategic conversation. You will learn how to: Speak the language of the business: Learn how to communicate SAP cyber risks to senior executives with impact — linking technical threats to financial, reputational, and operational outcomes. Prioritize what matters most: Discover how to assess and rank SAP vulnerabilities using likelihood and business impact — helping teams focus on what really drives risk reduction. Stay ahead of emerging risks — from AI-enabled threats to data sovereignty and new compliance pressures.

This dynamic discussion session examines recent high-profile cybersecurity breaches to highlight how threats evolve, how attackers exploit vulnerabilities, and how impacts extend far beyond the breached organization. Attendees will learn how disruptions to systems, sensitive data exposure, and compromised third-party relationships can trigger financial losses, regulatory scrutiny, reputational damage, and supply chain instability. The session will also explore broader economic implications, including market volatility and increased operational costs for organizations that were not directly breached. Join this session for an interactive discussion on: Strengthening security posture. Improving vendor risk management. Building resilience to mitigate far-reaching effects of modern cyberattacks.

AI and Agentic AI promise significant benefits, however, they bring security risks such as breaches of privacy and confidentiality, unauthorized access and action. The unpredictability of Generative AI also poses new risks. We must ensure chat bots, co-pilots and agents stay within their intended scope boundaries and authorizations. Agents that interact with business systems and especially those that can act on users' behalf need to be carefully controlled and these risks multiply when agents start collaborating together.   This session gives an overview of the security risks for AI workloads across the stack, from agent and application, down to the models, platforms, and infrastructure. This established cybersecurity practice helps to identify security risks so they can be addressed early. Join this session to learn techniques, tools, and services that SAP uses itself to secure AI workloads and minimize risk without inhibiting pace of innovation. You will learn: Full-stack security risks for AI workloads (SAP or otherwise).  Core principles of AI and Agentic AI threat modeling and risk identification.  Techniques, tools and services that can help reduce security risks.

Hear how Merck, a global leader in healthcare, science, and technology, has developed a cyber resilience strategy for their SAP S/4HANA Cloud environment using Zero Trust principles in the S/4HANA Private Cloud. Lessons learned emphasize collaboration, proactive security, SAP and partner technologies, user engagement, and an understanding of shared responsibilities. By attending this session, attendees will leave with ideas to strengthen their security posture and address evolving cyber threats in the SAP S/4HANA environment.

As SAP customers embark on or plan for an SAP S/4HANA transformation, SAP security professionals must prepare for this new frontier. With the Clean Core approach, the SAP landscape is shifting toward an API-first model where SAP BTP, specifically SAP Integration Suite, is central. For organizations coming from the SAP PI/PO world, this this is a new environment with its own limitations and challenges. As SAP Integration Suite becomes the hub for both SAP-to-SAP and SAP-to-non-SAP integrations, the granular RBAC controls familiar from the ABAP/Java world are no longer available in the same way.   Join this session to: Gain clarity on how SAP Integration Suite reshapes integrations with a Clean Core. Learn about process and architecture considerations to secure and govern SAP Integration Suite. Walk away with guidance on tenant strategy, CPI security, API security, policy and identity and access management.