SAP systems are the digital core of thousands of companies, managing everything from finance to logistics and critical customer data. However, a new report by SEIDOR, developed in collaboration with Microsoft, reveals an alarming reality: 88% of large Spanish organizations using SAP feel unprotected against the most sophisticated cyber threats. This data, drawn from a survey of 50 executives at companies with revenues exceeding 100 million euros, underscores the urgency of integrating cybersecurity as a strategic pillar in ERP management.

The Monitoring Paradox: Surveillance Without Effective Detection

The study reveals a troubling paradox: although 90% of companies monitor their SAP environment continuously, only 12% are able to detect fraud or manipulation when these are disguised as legitimate activities within the system. This gap shows that traditional security tools are insufficient against attacks that exploit trust in seemingly normal transactions. Early threat detection and incident response capabilities thus become critical to ensuring business continuity.

Offensive AI: The New Risk Frontier

Artificial intelligence is redefining the threat landscape. According to the report, 66% of surveyed companies consider offensive AI a relevant or very important risk for their SAP environment. AI's ability to generate more credible fraud, impersonation, and manipulation demands an evolution in defense strategies. As we noted in our analysis on The Era of AI in Consulting, adapting human and technical skills is key to facing these challenges.

Security by Design: A Comprehensive Approach

The SEIDOR report insists that cybersecurity must be integrated from the design of SAP platforms and accompany their entire lifecycle. This involves not only protecting critical data and managing identities and access but also adopting a holistic view that includes ERP modernization and increasing regulatory pressure. Operational resilience depends on the ability to monitor, identify anomalous behavior, and respond quickly. In this regard, lessons learned in cloud environments, such as those we shared in Operating Kubernetes at Scale, can be applied to strengthen SAP security.

The Path to Effective Protection

To close the gap between monitoring and actual detection, organizations must adopt advanced solutions that combine behavior analysis, machine learning, and automated responses. Collaboration with experts and investment in training are essential steps. As we highlighted in our success story on Implementing Generative AI in Workflows, technology alone is not enough; a cultural and strategic shift is required.

The 'SAP Cybersecurity 2026' report by SEIDOR, available for free download, offers a roadmap for companies to protect their digital heart. SAP cybersecurity is no longer a technical option but a business priority demanding immediate action.

Original source: ComputerWorld. Analysis and adaptation by ForgeNEX.