SAP Security Strategies for Data Ring- Fencing in Mergers and Acquisitions

Further research should address the impact of cloud-native SAP solutions on data segregation and system perimeters. Also, as companies increasingly leverage SMACIT technologies, standardized cybersecurity risk modeling can help researchers to link technical configurations and organizational complexity. Longitudinal research can explore how agile SAP security strategies affect the frequency of integration challenges in heterogeneous IT landscapes. Integrating security considerations during the early phases of the M&A process can contribute to deal success. Evidence indicates that companies that actively include information security leaders in the due diligence process experience higher M&A success. Effective SAP security entails a combination of technical and organizational controls that extend beyond periodic audits. Creating an incentive-compatible modular SAP security concept can be helpful after mergers as it can be used as a blueprint for other M&A deals. Automating the SAP security concept can facilitate governance. For example, approval processes can be configured into SAP, embedding the notion of stewardship in master data management processes. Role-based access control is another example where governance is built into the system. This approach to SAP security not only can help companies better manage the challenges of SAP security during M&A, it also can facilitate divestment by ensuring that IT can be securely decoupled. Embedding governance in SAP can facilitate stewardship of SAP. Ultimately, a more holistic and proactive approach to SAP security can prevent data perimeters from becoming a source of lasting vulnerabilities during M&A.

Bloch, F. (2020). Impact of corporate audit findings on the planning and implementation of SAP ERP Segregation of Duties in a corporate environment. In Theseus (Ammattikorkeakoulujen). https://www.theseus.fi/handle/10024/349394 Bodipudi, A., & Gopireddy, R. R. (2021). Implications and Strategies of Cyber Threat Landscape in Hospital Mergers and Acquisitions. International Journal of Science and Research (IJSR), 10(10), 1632–1636. https://doi.org/10.21275/sr24801082224 Henningsson, S., Yetton, P., & Wynne, P. J. (2018). A Review of Information System Integration in Mergers and Acquisitions. Journal of Information Technology, 33(4), 255–303. https://doi.org/10.1057/s41265-017-0051-9 Hjerppe, K., Ruohonen, J., & Leppanen, V. (2019). The General Data Protection Regulation: Requirements, Architectures, and Constraints. arXiv (Cornell University), 265–275. https://doi.org/10.1109/re.2019.00036 Hosseini, K. D., & Paul, D. L. (2017). Assessing Cybersecurity Risk for Oil & Gas Mergers and Acquisitions. SPE Western Regional Meeting. https://doi.org/10.2118/185626-ms Hough, J. R., Haines, R., & Giacomo, S. D. (2007). Contextual factors affecting the integration of enterprise systems in post-merger oil and gas companies. Enterprise Information Systems, 1(4), 421–441. https://doi.org/10.1080/17517570701630404 Tanriverdi̇, H., & Du, K. (2009). DISINTEGRATING INFORMATION TECHNOLOGY IN CORPORATE DIVESTITURES : IMPLICATIONS FOR REGULATORY COMPLIANCE RISKS AND COSTS. International Conference on Information Systems, 50. http://dblp.uni-trier.de/db/conf/icis/icis2009.html#TanriverdiD09 Tanriverdi̇, H., & Du, K. (2020). Corporate Strategy Changes and Information Technology Control Effectiveness in Multibusiness Firms. MIS Quarterly, 44(4), 1573–1617. https://doi.org/10.25300/misq/2020/14223