Business AI & JouleSecurity & RiskCase Study

Customer Case Study: Securing SAP Business Processes for the Agentic AI Era

Wed, 18 Nov 2026 · 12:20 PM – 1:00 PMLevel 5 - Room 5.5
Paul Hesford

Paul Hesford

Deputy Chief Financial Officer - Digital Transformation · Department of Transport & Main Roads

Paul is the Deputy CFO – Digital Transformation at the Department of Transport and Main Roads, where he leads enterprise transformation initiatives focused on improving operational visibility, financial governance, and long-term infrastructure planning across a large and complex public sector environment. His work spans the intersection of finance, digital transformation, and operational delivery, with a strong focus on enabling better decision-making across asset management, supply chain, and procurement functions. Paul brings experience navigating large-scale organisational change, aligning technology investment with operational outcomes, and supporting transformation programs that improve efficiency, transparency, and service delivery at scale.

Phil Burgess

Phil Burgess

Senior Cyber Governance Advisor, APAC Customer Advisory · SAP

Phil Burgess is a Senior Advisor in SAP’s APJ Cyber Security and Compliance Advisory (CSCA) team, where he helps customers navigate the evolving demands of cyber security, compliance, and data governance. With a career spanning governance, risk, and compliance leadership, Phil brings deep expertise in building resilient and secure organisations. Before joining SAP, Phil was Data Governance Lead and Cyber Governance Lead at Rio Tinto, where he partnered with IS&T leadership to drive risk transformation, assurance over critical risks, and compliance programs including SOX. He led multidisciplinary teams across cyber standards, resilience, and business continuity, shaping governance practices that enabled large-scale transformation. At SAP, Phil now works with customers across Asia Pacific and Japan to strengthen cyber resilience, streamline compliance, and align security governance with business priorities.

The session

About this session

This is a Best Tech Awards 2026 Intelligent ERP – Winner

As AI agents become active participants in business processes, organisations must protect more than their technology landscape. Following its move to RISE with SAP, Queensland’s Department of Transport and Main Roads recognised the need to extend security into the business logic, data and decisions that AI can influence.

Working with SAP security specialists, TMR developed a business-led approach spanning governance, assurance, threat modelling and incident readiness. Using procure-to-pay as a high-risk scenario, TMR applied threat modelling at the business-process level, translated SAP’s shared-responsibility model into clear operational accountabilities, and tested its resilience through a business-led cyber incident exercise. Hear how this approach strengthened audit readiness, established a repeatable SAP incident playbook and better prepared TMR to manage emerging AI-related security risks.

What You'll Learn

  • How to extend SAP security into business processes, data and decision-making.
  • How process-level threat modelling can help assess agentic AI risks.
  • How to turn shared responsibility and incident readiness into practical business capabilities.
Business AI & JouleSecurity & Risk

More sessions you'll find valuable

Business AI & JouleSecurity & Risk

JW301 | SAP-Managed Joule & the Joule Platform: One Platform, Many Systems

Jason Tran

Jason Tran

Platform Solutions Engineer · SAP

View session details
Digital Transformation & Cloud ERPBusiness AI & JouleFinancials & GRC

Autonomous Finance - Freeing Capacity Without Losing Control

Saijes Mundadan

Saijes Mundadan

SAP oCFO Lead - ANZ · SAP

View session details
Digital Transformation & Cloud ERPS4HANA CoreFinancials & GRCSecurity & Risk

SAP Security Incident Response - Tabletop Exercise

Colleen Hebbert

Colleen Hebbert

Head of Cyber Governance ANZ / APAC Customer Advisory · SAP

View session details