The introduction of S/4 Hana is a major game-changer for SAP, as it offers a solution that’s designed to meet the challenges and requirements of the digital economy. And as 2025 marks the deadline to switch from ECC to S/4 Hana, it’s no surprise that large numbers of SAP customers are now preparing to migrate.
One of the biggest but often overlooked considerations within moving to the S/4 platform is the issue of security. This is largely due to the introduction of SAP Fiori – a key aspect of S/4, which emphasises the role of mobile.
The result will be greater productivity and efficiency – as all users will have better and more flexible access to relevant systems and information, wherever they are. Yet this improved mobility also has its drawbacks when it comes to security, as it opens up many potential routes into core business systems and data.
How to navigate the security risks
- Set up an external gateway. This is a gateway that resides outside the organisation’s own network and requires users to log in using a set protocol. This adds an additional layer of security to the login process that protects the network.
- Ensure encryption is enabled. Encrypting files and making them unreadable without the correct encryption key significantly enhances security. Even if someone does manage to gain access to these files, they won’t be able to do anything with them. Enabling end-to-end encryption ensures that communications between SAP and users cannot be intercepted, even if they are using public Wi-Fi hotspots.
- Develop strong and effective mobile device management. Controlling device access to company networks and data keeps the enterprise on top of who is doing what with which devices, so it can feel confident that mobile users are working within company policies. This requires a robust approach to the management of mobile devices, which will ensure knowing where devices are and keeping them up-to-date and patched. Usage should also be monitored to make sure that password standards, and other configurations, are being enforced.
- Introduce certification protocols. The system can be secured, and unauthorised users kept out, through the introdution of certification protocols, so that each user has to be certified before accessing an organisation’s system.
- Improve intrusion detection and prevention through network traffic monitoring. Traffic across the network should be automatically monitored and analysed to check for any suspicious usage patterns. This protects the system from network-based threats.
Conclusion
The introduction of S/4 Hana offers an incredible opportunity. Thanks to the ground-breaking introduction of Fiori, it dramatically modernises the user experience and speeds up planning, execution and collaboration.
However, the potential security risks that come with the new platform cannot be ignored, making it a careful balancing act. Overly restrictive controls would be counter-productive to the huge benefits offered by S/4 and Fiori as they would take away the increased mobility offered by the platform and potentially harm the business case.