Onapsis, in collaboration with The Cloud Security Alliance (CSA), a not-for-profit organization dedicated to raising awareness of best practices to help ensure a secure cloud computing environment, has completed The Critical Controls Implementation for SAP white paper. The Critical Controls Implementation for SAP is the first in a series of implementation documents that focuses on specific ERP technologies and aids organizations in securely migrating to and operating ERP applications in cloud environments. In this document, the working group focuses on providing guidelines on controls implementation as well as a set of checklists for SAP administrators. Download this white paper now for control implementation guidance on a variety of controls.
Download Now

About the Author
As CTO, JP leads the innovation team that keeps Onapsis on the cutting edge of the Business-Critical Application Security market, addressing some of the most complex problems that organizations are currently facing while managing and securing their ERP landscapes. JP helps manage the development of new products as well as support the ERP cybersecurity research efforts that have garnered critical acclaim for the Onapsis Research Labs. JP is regularly invited to speak and host trainings at global industry conferences, including Black Hat, HackInTheBox, AppSec, Troopers, Oracle OpenWorld and SAP TechEd, and is a founding member of the Cloud Security Alliance (CSA) Cloud ERP Working Group. Over his professional career, JP has led many Information Security consultancy projects for some of the world’s biggest companies around the globe in the fields of penetration and web application testing, vulnerability research, cybersecurity infosec auditing/standards, vulnerability research and more.
More about this author
Further Reading
Beyond the Basics: Why Comprehensive Application Security Testing for SAP is Non-Negotiable
The shift to the cloud and the rapid evolution of SAP S/4HANA have fundamentally changed the rules of secure software development. Many organizations assume that operating within the SAP ecosystem means built-in tools and the provider’s infrastructure will fully manage their security and compliance requirements. However, relying solely on baseline code security leaves critical vulnerabilities…
The NIST Cybersecurity Framework: What It Is and How to Apply It to SAP
The NIST Cybersecurity Framework provides a comprehensive methodology for organizations to manage cyber risk. Implementing the NIST framework within SAP systems secures the financial, operational, and human resources data that drives the global enterprise. Data breaches cost an average of $4.44 million globally, making robust SAP Governance, Risk, and Compliance strategies essential for modern businesses….
Security: The Silent Enabler of Your SAP Cloud ERP Transformation
The race to SAP Cloud ERP (formerly SAP S/4HANA Cloud) is on, and the industry’s North Star is the “Clean Core.” The goal is simple: keep the standard SAP core untouched to ensure agility, seamless upgrades, and a lower total cost of ownership. However, many organizations mistakenly view security as a separate hurdle to clear…
