SAP Integration with SIEM System

This is a practical guide showing how step by step build effective threat detection program in SAP systems.

The author explains, among other things:

  • How to define the scope of monitoring (systems, environments, criticality level),
  • Which events in SAP are actually relevant from a security perspective?,
  • How to connect SAP to a SIEM system in a cost- and log-quantity-controlling manner by filtering at the source.

Additionally, the material shows what they should look like Daily SOC operations in the context of SAP - from rule tuning, through anomaly analysis and triage, to incident escalation. It also discusses the required competencies of SOC analysts, cooperation with SAP experts, and typical implementation errors.

The whole is complemented by concrete practical elements, such as sample correlation rules, priority matrices, KPIs, and a maturity roadmap, which help transition from basics to real SAP threat detection with minimal „noise.”.

Speaker - Tomasz Jurgielewicz

Webinar partner

Who is the webinar for?

Cybersecurity teams (SOC / SIEM / Blue Team)

SOC analysts, SIEM engineers, Threat detection / threat hunting specialists, Especially those who want to effectively „hook” SAP into monitoring without being flooded with alerts and logs.

SAP Basis Administrators and Architects

managers responsible for SAP logging, transport, user, and configuration responsible for the stability and security of SAP systems

IT Security Architects / Enterprise Security Architects

Designing threat detection and monitoring architecture Integrating SAP with SIEM, SOAR, and IAM

IT Risk / GRC / Compliance (e.g., NIS2, SOX, ISO 27001)

Individuals responsible for risk and compliance control needing evidence of SAP incident monitoring and detection

IT and Security Managers (CISOs, IT Managers)

making decisions about the construction or maturity of a detection program evaluating costs vs. actual security value

About the speaker

Tomasz Jurgielewicz

Head of Security Development

For 10 years, he has led a team of SAP Security specialists, providing comprehensive services and tools for securing SAP systems and optimizing licenses. Experience in the area:

  • Identification of authorization conflicts and reorganization of authorization,
  • SAP vulnerability identification,
  • Integration of SIEM solutions with SAP,
  • SAP license optimization.

Unparalleled SAP licensing expertise

Our SAP experts know what has worked for other companies in audit negotiations and will share best practices with you during a live webinar.

Contact us