New Book Unveiled at SAPinsider Offers Key Cybersecurity Insights

Summary

• Title and Context: Onapsis premiered “Cybersecurity for SAP,” a new SAP PRESS book on securing SAP systems, at SAPinsider North America.
• Authors’ Expertise: Written by Gaurav Singh, SAP cybersecurity manager at Under Armour, and JP Perez-Etchegoyen, CTO and co-founder of Onapsis.
• Why SAP Security Matters: SAP systems run core business operations, which makes them high-value targets.
• Contents and Structure: The book covers security roadmaps, vulnerability management, threat detection and incident response.
• Audience: Aimed at IT and security professionals who are responsible for SAP systems.

A book on SAP security

Onapsis premiered “Cybersecurity for SAP” at SAPinsider North America in March 2025. The SAP PRESS book is by Gaurav Singh and JP Perez-Etchegoyen, and its argument is direct: SAP systems run finance, supply chain and HR for many large companies, which is exactly why attackers want in. Few security programs cover them well.

Who wrote it

The authors come at the problem from different sides. One runs SAP security inside a large company. The other builds ERP security tools at Onapsis.

Gaurav Singh

Singh is the SAP cybersecurity manager at Under Armour, where he handles security for the company’s SAP environment day to day.

JP Perez-Etchegoyen

Perez-Etchegoyen is CTO and co-founder of Onapsis. He leads the company’s technology and research work on ERP vulnerabilities, which informs much of the book.

About Onapsis

Onapsis sells security tools for SAP and other ERP systems. Mariano Nunez is its CEO and co-founder.

Why SAP is a target

SAP systems handle critical operations from finance to supply chain management. Their complexity and central role make them attractive to attackers. Yet many go underprotected, partly because of their intricate design and partly because of an assumption that enterprise software is secure by default. “Cybersecurity for SAP” sets out to correct that with detailed strategies and practical steps.

The cost of ignoring SAP security

An insecure SAP system can mean financial loss and business disruption. The book argues for hunting weaknesses early.

What the book covers

“Cybersecurity for SAP” mixes technical guidance with strategy. It is written for CISOs, security staff and SAP administrators.

Building a security roadmap

The book walks through building a security roadmap fitted to each organization’s SAP setup, covering current vulnerabilities and likely future threats.

Day-to-day practices

It also covers routine work such as patching and access control, plus threat detection and incident response for SAP.

Who should read it

The book is aimed at people who protect enterprise environments built on SAP. Its practical focus makes it most useful to teams that already run SAP and need a plan.

Next steps for SAP teams

SAP security problems point to a broader gap. Many teams still treat ERP systems as off-limits to the security program, leaving the most valuable data in the company with the least scrutiny.

For those teams, a practical book written partly by someone who secures SAP for a living is a reasonable place to start.

John King, CISSP, PMP, CISM

John King currently works in the greater Los Angeles area as a ISSO (Information Systems Security Officer). John has a passion for learning and developing his cyber security skills through education, hands on work, and studying for IT certifications.