Business AI & JouleFinancials & GRCSecurity & RiskSession

From “Shift Left” to “Shift Up” Business-Process-Anchored Security in the Age of AI

Wed, 18 Nov 2026 · 2:05 PM – 2:45 PMLevel 5 - Room 5.5
Phil Burgess

Phil Burgess

Senior Cyber Governance Advisor, APAC Customer Advisory · SAP

Phil Burgess is a Senior Advisor in SAP’s APJ Cyber Security and Compliance Advisory (CSCA) team, where he helps customers navigate the evolving demands of cyber security, compliance, and data governance. With a career spanning governance, risk, and compliance leadership, Phil brings deep expertise in building resilient and secure organisations. Before joining SAP, Phil was Data Governance Lead and Cyber Governance Lead at Rio Tinto, where he partnered with IS&T leadership to drive risk transformation, assurance over critical risks, and compliance programs including SOX. He led multidisciplinary teams across cyber standards, resilience, and business continuity, shaping governance practices that enabled large-scale transformation. At SAP, Phil now works with customers across Asia Pacific and Japan to strengthen cyber resilience, streamline compliance, and align security governance with business priorities.

Colleen Hebbert

Colleen Hebbert

Head of Cyber Governance ANZ / APAC Customer Advisory · SAP

Colleen is an Cybersecurity Advisor and the APJ Cybersecurity Hub Lead. She works with SAP Customers to provide cybersecurity and compliance information to them to help them risk assess the cloud services as part of their due diligence process. In her role as a hub lead, she helps build communities and share knowledge to improve the cybersecurity conversation within the SAP ecosystem. Colleen has been a member of the wider SAP Community with a specialisation in SAP application security and access control for almost 20 years. During this time she has worked her way through production support, projects and implementations, architectural guidance, quality assessment, and de-escalation of customer reported issues. She’s always happy to catchup with community members and share insights as well as learn from others.

The session

About this session

For years, “shift left” has meant embedding security earlier in the development lifecycle. But as AI agents become part of core business processes, securing code earlier is no longer enough. Risk increasingly sits within the decisions, data, identities, controls and handovers that make up an end-to-end process.

This session introduces Shift Up, an approach that anchors security in the business process rather than the technical asset alone. Drawing on customer co-engineering experience and a structured Business Process Threat Modelling methodology, it will explore how organisations can use their existing process intelligence tools and SAP capabilities to understand threats in their business context and strengthen governance as AI becomes more embedded in operations.

What You'll Learn

  • Why embedding AI agents into core business processes requires security teams to look beyond code and technical assets.
  • How Business Process Threat Modelling connects security risks and controls to end-to-end processes and their potential business consequences.
  • How existing process intelligence tools and SAP capabilities can help identify, assess and govern threats that traditional security models may miss.
Business AI & JouleFinancials & GRCSecurity & Risk

More sessions you'll find valuable

Business AI & JouleFinancials & GRCSecurity & Risk

BT161 | From Discovery to Decommissioning: A Hands-On AI Governance Workshop

Murali Shanmugham

Murali Shanmugham

Global Business AI Strategy Advisor · SAP Australia

View session details
PlatformsApplication Development & AutomationBusiness AI & Joule

Architecting AI Agents with Joule and SAP BTP

Steven Chua

Steven Chua

Enterprise Architecture Advisory · SAP

View session details
Digital Transformation & Cloud ERPBusiness AI & JouleFinancials & GRC

Autonomous Finance - Freeing Capacity Without Losing Control

Saijes Mundadan

Saijes Mundadan

SAP oCFO Lead - ANZ · SAP

View session details