Customer Case Study: Securing SAP Business Processes for the Agentic AI Era
Paul Hesford
Deputy Chief Financial Officer - Digital Transformation · Department of Transport & Main Roads
Phil Burgess
Senior Cyber Governance Advisor, APAC Customer Advisory · SAP
The session
About this session
This is a Best Tech Awards 2026 Intelligent ERP – Winner
As AI agents become active participants in business processes, organisations must protect more than their technology landscape. Following its move to RISE with SAP, Queensland’s Department of Transport and Main Roads recognised the need to extend security into the business logic, data and decisions that AI can influence.
Working with SAP security specialists, TMR developed a business-led approach spanning governance, assurance, threat modelling and incident readiness. Using procure-to-pay as a high-risk scenario, TMR applied threat modelling at the business-process level, translated SAP’s shared-responsibility model into clear operational accountabilities, and tested its resilience through a business-led cyber incident exercise. Hear how this approach strengthened audit readiness, established a repeatable SAP incident playbook and better prepared TMR to manage emerging AI-related security risks.
What You'll Learn
- How to extend SAP security into business processes, data and decision-making.
- How process-level threat modelling can help assess agentic AI risks.
- How to turn shared responsibility and incident readiness into practical business capabilities.
More sessions you'll find valuable
JW301 | SAP-Managed Joule & the Joule Platform: One Platform, Many Systems
Jason Tran
Platform Solutions Engineer · SAP
Autonomous Finance - Freeing Capacity Without Losing Control
Saijes Mundadan
SAP oCFO Lead - ANZ · SAP
SAP Security Incident Response - Tabletop Exercise
Colleen Hebbert
Head of Cyber Governance ANZ / APAC Customer Advisory · SAP




