Delivering trusted cloud solutions 

Security governance is critical for our strategy. We take guidance from industry standards such as the U.S. National Institute of Standards and Technology (NIST), the International Organization for Standardization (ISO), and others.

SAP experts are prepared to assess security controls and manage certifications and attestation audits. We have numerous certifications and can address third-party risk management and assess our suppliers for compliance. 

Resiliency lets SAP adapt to threats against the interests of stakeholders, reputation, critical operations, and more. To do this, we implement redundancy and business continuity management into our systems to help us to respond to threats. 

We monitor and provide alerts for suspicious activity and vulnerabilities, conduct routine scans of external-facing Web infrastructure and third-party penetration tests, and deploy red team testing to evaluate system security.

To protect customer data, SAP uses a risk-based methodology that supports planning, mitigation, and countermeasures. We can address threats to our assets and resources by conducting assessments and understanding the impact they may have. 

Protecting physical assets is crucial to protecting customer data. Our physical security programs manage the safety and protection of our employees while they work. By protecting offices with technology and people, we elevate our security. 

We include security in all aspects of development, security, and operations (DevSecOps). Our operations are implemented in security control designs and practices for the network, application, servers, operating system, databases, and more.