German software group, SAP has disclosed on Tuesday that some of its cloud products did not meet contractual or statutory security standards and said it would take remedial action to fix the problem as soon as possible, Reuters reports.
According to the report, the shortcomings were not identified in response to a specific security incident, the German company said, nor did it believe that any customer data had been compromised as a result of those issues.
While SAP, Europe’s most richly valued technology company, declined to elaborate on a statement it issued overnight, the news follows management turmoil and a reduction to its profit forecast due to the coronavirus pandemic.
Analysts said it could dampen enthusiasm among SAP’s client base to back a digital transformation in which it is seeking to shift the operation of the enterprise, human resources and marketing applications to off-site data centres from its traditional model of putting servers at customer locations.
“Events like this don’t help SAP’s reputation, and both existing and new customers of SAP will likely spend more time digging into SAP’s product security now,” said Jefferies analyst Julian Serafini.
The company shares fell by 0.4%, under performing a gain of 1.4% in Germany’s 30-share DAX index of blue-chip stocks.
The company as reported by Reuters, was founded by a group of IBM alumni in the 1970s, recently ended its dual leadership structure with co-CEO Jennifer Morgan leaving, bringing an end to the six-month tenure of the first woman to head a top-tier German listed company.
American Morgan was responsible for SAP’s cloud operations. Christian Klein, a protege of co-founder and Chairman Hasso Plattner, is now sole CEO of the company based in the southwest German town of Walldorf.
The report also added that the company said it had initiated action to address the shortcomings it has identified in relation to contractually agreed or statutory security standards. This work would be completed to a large extent in the second quarter.
“SAP is informing affected customers – approximately 9% of SAP’s 440,000 customers – and providing full product and customer support,” the company said.
“The expenses related to the remediation are expected to be covered within the range of SAP’s current 2020 financial outlook.”
The products affected range from human resources to travel and expenses management, sales and analytics. Gartner analyst Christian Hestermann estimated that the remedial measures would affect the bulk of SAP’s cloud customer base.
They also named a new top security team, appointing Tim McNight as Chief Security Officer, Richard Puckett as Chief Information Security Officer and John Coovert as Global Head of Physical Security.
(Reuters)