SAP Trust Center
SAP Ariba Statement of Applicability and ISO 27001 Certificate
SAP Statement of Applicability states what ISO 27001 controls and policies are being applied by the SAP Ariba cloud solution. It benchmarks against the Annex A control set in the ISO 27001 standard.
The ISO 27001 certificate applies to the Information Security Management System for the scope, “Development, support, operations and consulting of the SAP Ariba Cloud Solution"; Following the standard ISO/IEC 27001:2013. In addition to this certification, the organization uses the standards ISO/IEC 27017:2015 and ISO/IEC 27018:2019.