Resources
Notes from the work
Short pieces on the problems that come up repeatedly in SAP security engagements — written by the people doing the work, not by a marketing team. No gated downloads, no forms.
Latest
Articles
Cybersecurity
Would you know if someone was already inside SAP?
Your SIEM watches the network, the endpoints and the domain. It does not understand SAP — and that gap is architectural, not negligent.
Read SAP GRCYour controls passed in March. What happened in April?
Periodic testing samples a moment. Business risk is continuous. What continuous controls monitoring finds that an audit structurally cannot.
Read SAP GRCWhy your SoD conflict count never goes down
The number is flat because the process is measuring the wrong thing. What to change, and the order to change it in.
ReadMore coming
We publish when we have something worth saying rather than to a schedule. If there is a topic you would find useful, tell us and we will write it.