Live on SAP RISE
You are live. Your SAP RISE environment is running the business. Now is the right time to validate your security posture, close the gaps that opened during go-live, and build the assurance your organisation needs to operate with confidence.
sapcyberx works with organisations already live on SAP RISE — on demand, on a fixed annual cycle, or as a standing advisory. Independent. Fast. Aligned to your cyber framework.
Talk to us about your RISE environmentWhat organisations want to achieve
On demand. Annual cycle.
Always independent.
Every live RISE environment is different. We work on demand for organisations who need a specific assessment or test, and on an annual fixed cycle for organisations who want continuous assurance baked into their security programme.
14-Day SAP Cyber Assessment
A structured 14-day assessment of your live SAP RISE environment. Pre-built test packages and accelerators mean we scope fast, test deep, and deliver an audit-ready evidence pack — without disruption to your live operations.
- • Mandatory parameters vs SAP Note 3250501
- • Identity and access — IAS, IPS, IAG, MFA
- • Authorisation and SoD posture
- • Network — RFC, Gateway, ICM, Web Dispatcher
- • Infrastructure — WAF, FW, DNS, TLS certs
- • Custom code and ABAP review
- • Fiori catalogues and OData exposure
- • BTP, integration and AI workloads
- • Audit-ready evidence pack
- • Three-Bucket Method™ findings
- • Executive summary
- • Framework mapping (ISM · E8 · NIST · CIS)
- • Remediation roadmap
- • Retest of critical findings
- • 14 days end-to-end
- • Fixed scope after scoping call
- • No disruption to live operations
- • Available on demand or annual cycle
SAP Penetration Test — 7 Days Standard Scope
An adversarial test of your live SAP RISE environment. Standard scope delivered in 7 days — extended to 14 days for infrastructure, integrations and AI surface. SAP NDA managed. KBA 3080379 compliant. Risk-ranked report and remediation roadmap delivered. Full retest included.
- • RFC Gateway exploitation
- • ICM and Web Dispatcher
- • Fiori and OData exposure
- • Identity federation attacks
- • SAML, OIDC, MFA bypass
- • ABAP static and dynamic analysis
- • HANA privilege escalation
- • WAF and firewall validation
- • DNS and TLS/HTTPS review
- • Cloud Connector end-to-end
- • BTP security configuration
- • SuccessFactors, Ariba, IBP
- • Joule and AI agent testing
- • BTP-hosted AI workloads
- • CVSS-scored findings
- • Risk-ranked remediation roadmap
- • Three-Bucket Method™ output
- • Executive summary
- • SAP KBA 3080379 compliant
- • Full retest included
Annual SAP Cyber Assurance Programme
For organisations who want continuous SAP security assurance built into their annual programme. One cyber assessment, one penetration test, and two quarterly checkpoint reviews per year. Fixed scope. Independent. Audit-ready output every cycle.
- ✓Annual 14-day SAP Cyber Assessment
- ✓Annual SAP Penetration Test (7-day standard, 14-day extended)
- ✓Two quarterly SAP security checkpoint reviews
- ✓Continuous Three-Bucket Method™ tracking
- ✓Year-on-year maturity progress reporting
- ✓Priority access for on-demand advisory
- ✓Framework alignment updates
- ✓Board-ready annual security summary
Organisations on annual programme typically move from 40% to 75%+ Essential Eight maturity within 12 months — leveraging SAP RISE capabilities at no additional licence cost.
Most engagements start within two weeks of first call. Fixed scope after scoping call.
→ Book a 30-minute call