SecurityBridge Launches Cybersecurity Resilience Index for SAP

• •SecurityBridge's CRIS report benchmarks SAP security across eight areas of responsibility.
• •Most new customers score between 30% and 40% in SAP security maturity.
• •The report will be updated biannually to reflect evolving SAP security trends.

On March 17, 2026, SecurityBridge released the Cybersecurity Resilience Index for SAP (CRIS), a benchmarking report analyzing the security of SAP environments. The report is based on data from thousands of SAP production environments and aims to provide organizations with insights into their security posture. It evaluates security controls across eight areas of responsibility (AoRs) and assigns ratings from 0 to 100%. The report reveals that most new customers score between 30% and 40%, with specific areas like Authorizations (68%) and Data Protection (65%) showing notable vulnerabilities. The initiative responds to recent global security incidents involving SAP systems and aims to enhance the understanding of SAP security maturity. SecurityBridge plans to update the CRIS report every six months to reflect ongoing trends and improvements in SAP security. The comprehensive dataset from SecurityBridge is expected to drive conversations around SAP security and better protection of critical business processes.