SAP systems manage a company’s most critical data. Yet they often remain a blind spot in the SOC because security-relevant events from SAP and Fiori either do not reach the SIEM at all or are only captured incompletely.
In this roundtable, we will discuss whether and how SAP really belongs in the SOC: which log sources are truly relevant, how SAP and Fiori events can be integrated into existing SIEM environments, and how to bridge the gap between SAP Basis and the SOC. Using Falcora as an example, we will demonstrate how an SAP SIEM connector can make threats visible in real time.