AI in SAP: Balancing Opportunity, Risk, and Control
Meet your host
Richard Hunt is the founder and CEO of Turnkey Consulting.
At Turnkey, Richard sets the strategic direction for a team of 200+ SAP security, GRC, and Identity and Access Management experts. Bringing together technical excellence, business alignment, and organisational change management, this approach has fueled Turnkey’s success for more than 20 years.
Prior to founding Turnkey, Richard worked at PwC in an SAP Security/GRC SME capacity and as an independent SAP consultant at BHP Billiton and Zurich Financials Australia. He has a BA Hons in Economics & Law from Exeter University.
Richard Hunt is the founder and CEO of Turnkey Consulting.
At Turnkey, Richard sets the strategic direction for a team of 200+ SAP security, GRC, and Identity and Access Management experts. Bringing together technical excellence, business alignment, and organisational change management, this approach has fueled Turnkey’s success for more than 20 years.
Prior to founding Turnkey, Richard worked at PwC in an SAP Security/GRC SME capacity and as an independent SAP consultant at BHP Billiton and Zurich Financials Australia. He has a BA Hons in Economics & Law from Exeter University.
Who should watch
CISOs, CIOs, CFOs, S/4 transformation leads, IT Security/GRC leads, SAP program leads, enterprise architects, SAP application owners, SAP security managers, cybersecurity managers, Finance Operations leaders
What you’ll gain
-
Understand how AI changes the SAP security landscape: Learn why AI fundamentally shifts what's exploitable in your environment — and why access that was previously theoretical becomes fully actionable when AI can identify and use it at machine speed.
-
Apply security principles with the rigor AI requires: Discover how to implement least privilege, segregation of duties, and monitoring with the heightened rigor necessary when AI operates within your SAP environment continuously and at scale.
-
Secure AI agents as system users: Get practical guidance on treating AI agents like tightly-scoped system users with narrowly defined access guardrails — and why combining multiple focused agents is safer than creating highly capable agents with broad permissions.
-
Move from access control to behaviour monitoring: Learn why defining access alone isn't enough when AI can operate within its permissions but still behave unexpectedly — and how to implement behavior monitoring and outcome validation.
-
Enable AI as a business opportunity: Walk away with the tools to define a control baseline that supports AI use as it evolves, allowing you to operate more efficiently and execute processes with greater speed and consistency while maintaining security.