SAP Trust Center
SAP Enterprise Management System Statement of Applicability and ISO 27001 Certificate
SAP Statement of Applicability states what ISO 27001 controls and policies are being applied by the SAP Enterprise Management System cloud solution. It benchmarks against the Annex A control set in the ISO 27001 standard.
The ISO 27001 certificate applies to the Information Security Management System for the scope, “Operations of the SAP Enterprise Management System” cloud solution which include: SAP S/4 HANA Cloud Suite, SAP Marketing Cloud, SAP Integrated Business Planning and SAP CPQ; Following the standard ISO/IEC 27001:2013. In addition to this certification, the organization uses the standards ISO/IEC 27017:2015 and ISO/IEC 27018:2019.