AI in SAP: Balancing Opportunity, Risk, and Control
- Wed 10 Jun 2026
- 10 am GMT
For decades, many organizations have relied on a quiet assumption in relation to security for their SAP systems: users don't fully exploit the access they have. Overprovisioned roles and segregation of duties conflicts existed but were somewhat theoretical because users simply didn't navigate beyond familiar transactions.
AI is changing that dynamic completely. Whether through embedded assistants like SAP Joule, agent-based automation, or even a simple Gemini-generated Google response, AI enables users to identify available access, navigate transactions, and execute tasks at machine speed and scale. Access that previously went unused can now be fully exploited.
The good news? The core principles of SAP security haven’t changed. Least privilege, segregation of duties, monitoring, and access governance remain essential. What has changed is the margin for error—and the level of rigor required to apply these principles effectively.
This webinar explores how AI is reshaping the SAP risk landscape and what organizations need to do to secure their environments. We’ll cover how to strengthen access design, extend controls to AI agents, monitor behavior as well as access, and validate outcomes. You’ll leave with practical strategies to govern AI in SAP while maintaining the security controls that matter.
Register here
Meet your host
Richard Hunt is the founder and CEO of Turnkey Consulting.
At Turnkey, Richard sets the strategic direction for a team of 200+ SAP security, GRC, and Identity and Access Management experts. Bringing together technical excellence, business alignment, and organisational change management, this approach has fueled Turnkey’s success for more than 20 years.
Prior to founding Turnkey, Richard worked at PwC in an SAP Security/GRC SME capacity and as an independent SAP consultant at BHP Billiton and Zurich Financials Australia. He has a BA Hons in Economics & Law from Exeter University.
Richard Hunt is the founder and CEO of Turnkey Consulting.
At Turnkey, Richard sets the strategic direction for a team of 200+ SAP security, GRC, and Identity and Access Management experts. Bringing together technical excellence, business alignment, and organisational change management, this approach has fueled Turnkey’s success for more than 20 years.
Prior to founding Turnkey, Richard worked at PwC in an SAP Security/GRC SME capacity and as an independent SAP consultant at BHP Billiton and Zurich Financials Australia. He has a BA Hons in Economics & Law from Exeter University.
Who should attend
CISOs, CIOs, CFOs, S/4 transformation leads, IT Security/GRC leads, SAP program leads, enterprise architects, SAP application owners, SAP security managers, cybersecurity managers, Finance Operations leaders
What you’ll gain
-
Understand how AI changes the SAP security landscape: Learn why AI fundamentally shifts what's exploitable in your environment — and why access that was previously theoretical becomes fully actionable when AI can identify and use it at machine speed.
-
Apply security principles with the rigor AI requires: Discover how to implement least privilege, segregation of duties, and monitoring with the heightened rigor necessary when AI operates within your SAP environment continuously and at scale.
-
Secure AI agents as system users: Get practical guidance on treating AI agents like tightly-scoped system users with narrowly defined access guardrails — and why combining multiple focused agents is safer than creating highly capable agents with broad permissions.
-
Move from access control to behaviour monitoring: Learn why defining access alone isn't enough when AI can operate within its permissions but still behave unexpectedly — and how to implement behavior monitoring and outcome validation.
-
Enable AI as a business opportunity: Walk away with the tools to define a control baseline that supports AI use as it evolves, allowing you to operate more efficiently and execute processes with greater speed and consistency while maintaining security.