SAP’s purpose is to help the world run better.

As part of this purpose, SAP monitors emerging laws and industry requirements to keep up with changing standards. Our efforts relative to the new European security and resilience frameworks under NIS2, DORA and RCE are no different. SAP is analyzing these requirements, implementing specific technical measures, and engaging the relevant authorities with the aim of complying with these directives, regulations, and implementing acts.

As an informational resource, this document outlines frequently asked questions (FAQ) around NIS2, DORA and RCE and their impact on SAP. This document does not provide legal or professional advice, and SAP may modify any opinion expressed in this FAQ as regulatory and security requirements evolve. Customers are encouraged to seek independent counsel and guidance on these laws in support of their compliance efforts.

Please check the SAP Trust Center, periodically, for SAP updates on these requirements in the upcoming months.