Practical guides, case studies and product updates for SAP security & access management teams.
New: All practitioner content in one place - guides, case studies, ROI tools, comparisons.
Browse the Resources Hub arrow_forwardTwo processes, not one: who may use an SAP Firefighter account, and how each session is booked, started, controlled and reviewed. With real smartGRC screens.
Session-by-session Firefighter review misses 8 control gaps that only exist across sessions. See how cross-session AI review in smartAccess surfaces them.
A fair 2026 comparison of the leading SAP segregation of duties tools - SAP GRC, Pathlock, smartGRC, Soterion, MTC Skopos and more - by scope, S/4HANA coverage, deployment and cost.
The dates that matter (2027 mainstream EOL, 2030 legacy DB EOL, 2033 extended maintenance end), SAP GRC migration project cost €105-160k, and 90-day migration playbook from 15 signed enterprise references.
SAP GRC replacement roadmap for 2026-2031: 5-phase migration playbook, real cost breakdown for ECC and S/4HANA, and 5 alternatives compared side-by-side. From 15 signed enterprise references.
Six months of production SAP S/4HANA Firefighter data. Six control signals classical session review cannot detect. Reproducible queries inside.
21,000-word definitive guide based on hundreds of SAP authorization reviews. Covers S/4HANA Fiori SoD challenges, AI in GRC, SOX/GDPR/ISO 27001 alignment, 5-stage implementation roadmap, maturity model. Free, no signup, no email gate.
Access no longer lives only in SAP transactions. It lives in BTP scopes, non-SAP entitlements, and service/AI identities. Entitlement-model-agnostic SoD engine, hybrid BTP×SAP conflicts in one rule.
An AI agent runs more transactions in a minute than a person runs in a week. The answer is not "read the log" - it is exception-based review with a whitelist + blacklist policy.
From 4,000 flagged conflicts to a shortlist you can defend - with evidence, mitigation validation and AI-ranked fixes.
IAM/IDM + SAP GRC AC + IAG integration - best-of-breed architecture. Why building your own SoD engine is a losing bet.
3,100+ SAP RISE PCE v1.69 rules, 7 license classes, what-if analysis per CR - why manual analysis doesn't scale and what to do instead.
A major telco-media group extended smartReview beyond SAP to 8 non-SAP systems carrying material accounting, billing and customer data. Practitioner case study, anonymised.
AI agents for SAP access governance, six modules, interactive demo, ROI calculator and case studies - all in one place, in seven languages. A tour of the new smartgrc.eu.
How smartGRC's 19 AI agents divide by autonomy level, what each one does, and the governance layer that keeps them safe in a regulated environment.
Skipping the auth design phase in S/4HANA rollouts. What breaks, what surfaces at audit, and how to retrofit without a full role redesign.
Complete overview of SAP GRC - what it does, what it covers (Access Control, Process Control, Risk Management), and how to plan implementation.
Where SAP risk management went in the last 10 years - and where smartGRC positions the product for the AI era.
Role design principles that survive audit - naming, granularity, mapping to jobs, and common traps that inflate FUE.
Data-level security in SAP - what SAP GRC covers, what it doesn't, and where custom controls need to fill the gap.
User lifecycle in SAP - joiner, mover, leaver. What GRC AC does, what smartGRC automates, and the hidden manual tasks.
End-to-end guide to SAP authorization concepts - objects, values, profiles, transaction codes, Fiori catalogs and traps to avoid.
Practical framework for annual SAP access audits - preparation, evidence, common findings and how to remediate.
Practical framework for annual SAP access audits - preparation, evidence, common findings and how to remediate.
Real project rollout of smartReview - how a mid-size enterprise replaced Excel-based reviews with a governed workflow.
Second angle on the same smartReview rollout - focused on entitlement scope, review workflow and audit evidence.
Least privilege applied to SAP - concrete techniques, common overreach patterns, and how to detect them.
Companion piece to least privilege - focused on the "least required access" framing and mitigating controls.
Ownership matters - why entitlement review belongs with the business owner, and how to enable it without drowning them.
Practical walkthrough of the SoD matrix in smartGRC - onboarding, ruleset tuning, mitigation and periodic recertification.
SoD audit approach - what to look for, tooling options, quantifying risk, and evidence auditors actually accept.
First release of AI capabilities in smartGRC - what changed, what's next, and where the product roadmap is heading.
How to run a professional SAP authorization review with smartGRC: data preparation, reviewer workflow, decision automation, and closing the control loop.
How a global retail company ran a periodic SAP authorization review across 1000+ users, 2 ERPs, and 1518 SoD risks - in under 3 months with smartGRC.
New GRC Ninja episode: Andrzej and Filip demo the SoD matrix in smartGRC and smartReport - from login to risk reporting, with practical tips for SAP teams.
GRC Ninja experts break down the five most common mistakes in emergency and privileged access management for SAP - and how to avoid them.
How do you put out fires in an ERP system? GRC Ninja experts explain emergency and privileged access management in SAP - process, logs, and the right tools.
Are mitigating controls the cure for excessive permissions in SAP? Part 5 of the SoD series - why the topic matters and how to manage the cost of compliance.