ChaptersCircleEventsBlog
Join us for the in-person CCSK Azure course at Black Hat from August 4–5! Register now for a hands-on deep dive and secure your spot now!

Download Publication

Critical-Controls-Implementation-for-SAP-(Parts-1-and-2)
Critical-Controls-Implementation-for-SAP-(Parts-1-and-2)

Critical-Controls-Implementation-for-SAP-(Parts-1-and-2)

Release Date: 10/05/2020

SAP security documentation can be difficult to navigate and there are currently no frameworks that aligns with standard controls. This document aims to alleviate that problem by describing the implementation of the Top 20 Critical Controls for Cloud ERP Customer from a technology specific perspective, in this case SAP. SAP customers are extensively migrating to the cloud and will benefit from this document the most.
Download this Resource

Prefer to access this resource without an account? Download it now.

Bookmark
Share
Related resources
Critical Controls Implementation for Oracle Fusion Applications
Critical Controls Implementation for Oracle Fus...
Critical Controls Implementation for Salesforce
Critical Controls Implementation for Salesforce
Critical Controls Implementation for Oracle E-Business Suite
Critical Controls Implementation for Oracle E-B...
Why Do Organizations Migrate to the Public Cloud? Hint: It Isn’t About Cost Anymore
Why Do Organizations Migrate to the Public Cloud? Hint: It Isn’t Ab...
Published: 06/26/2025
A Data-Driven Look at the Top Security Tools for Startups
A Data-Driven Look at the Top Security Tools for Startups
Published: 06/03/2025
How the CISO Drives Value Across the Enterprise
How the CISO Drives Value Across the Enterprise
Published: 09/22/2023
Build a Strong SAP Security Strategy With the NIST Framework
Build a Strong SAP Security Strategy With the NIST Framework
Published: 12/22/2022

Acknowledgements

Michael Roza
Michael Roza
Risk, Audit, Control and Compliance Professional at EVC

Michael Roza

Risk, Audit, Control and Compliance Professional at EVC

Michael Roza is a seasoned risk, audit, control and compliance, and cybersecurity professional with over 20 years of experience across multinational enterprises and startups. As a Cloud Security Alliance (CSA) Research member for over 10 years, he has led and contributed to more than 140 CSA projects spanning Zero Trust, AI, IoT, Top Threats, DecSecOps, Cloud Key Management, Cloud Control Matrix, and many others.

He has co-chaired...

Read more

Victor Chin Headshot Missing
Victor Chin

Victor Chin

Shamun Mahmud
Shamun Mahmud
Senior Research Analyst, CSA

Shamun Mahmud

Senior Research Analyst, CSA

Juan Perez-Etchegoyen
Juan Perez-Etchegoyen

Juan Perez-Etchegoyen

As CTO and co-founder of Onapsis, JP leads the innovation and research teams that keeps Onapsis on the cutting edge of the Business-Critical Application Security market, addressing some of the most complex problems that organizations are currently facing while managing and securing their ERP landscapes. JP helps manage the development of new products as well as support the ERP cybersecurity research efforts that have garnered critical a...

Read more

Frederik Weidemann Headshot Missing
Frederik Weidemann

Frederik Weidemann

Sergio Abraham Headshot Missing
Sergio Abraham

Sergio Abraham

Hugh Fraser Headshot Missing
Hugh Fraser

Hugh Fraser

Thomas Kastner Headshot Missing
Thomas Kastner

Thomas Kastner

Fredrik Pihl Headshot Missing
Fredrik Pihl

Fredrik Pihl

Charlie Singh
Charlie Singh

Charlie Singh

Are you a research volunteer? Request to have your profile displayed on the website here.

Interested in helping develop research with CSA?

Related Certificates & Training