Until June, Sachar Paulus was CSO, responsible for IT, physical and organizational security at SAP. He is now SVP of product and security governance at the $12 billion German company. Paulus: The weakest link is still people who need to administer, manage or even use IT security functionality. The biggest risk is the insider threat — people who have access to the system who are using it in the wrong way or there is not enough control installed within the company. The main challenge for large organizations is to find the right balance.”]
Source: https://www.csoonline.com/article/2122277/the-erp-security-challenge.html