Your ERP system never sleeps. Neither does the AI that is trying to break into it. Jan Stoelting and Florian Kohler from KPMG get real about what that means, and why the old security playbook is no longer enough. ===== The episode tackles one of the most urgent questions in enterprise technology: what happens to ERP security when AI empowers both attackers and defenders at the same time? Jan Stoelting and Florian Kohler from KPMG Germany bring over 15 years of cybersecurity experience each to a conversation that goes well beyond standard advice. The core tension is stark: AI has not just raised the bar in cybersecurity, it has lowered the barrier to entry for anyone looking to cause damage. Attackers now operate at machine speed, scanning for vulnerabilities, generating exploits, and breaching defenses faster than any human team can keep up with. ERP systems are named as the crown jewels of any organization, and when they go down, the impact stretches from factory floors to national supply chains. A striking real world case drives the point home: a deepfake video call that convinced an employee to approve 25 million dollars in fraudulent transfers. Jan and Florian introduce the concept of agentic zero trust, extending traditional identity principles to cover AI agents that now act, decide, and orchestrate autonomously inside enterprise systems. Most companies fall short not because they lack technology but because they underestimate governance, visibility, and the need to build security by design from the very start. The shift to the autonomous enterprise makes identity the new control plane, where the critical question is no longer who accessed the system but which agent did what, when, and why. Useful Links: SAP Cloud ERP https://kpmg.com/ Follow Us on Social Media! SAP S/4HANA Cloud ERP: LinkedIn ===== Guest 1: Florian Kohlar, Partner, Cyber Security and Resilience at KPMG Germany Florian is a Partner in KPMG Germany, specializing in cyber security and identity and access management. He advises large international organizations on securing digital identities, modernizing access management, and navigating complex transformation programs. His current focus is on the intersection of AI, digital trust, and enterprise security, helping organizations prepare for the next generation of human and machine identities. Guest 2: Jan Stoelting, Partner at KPMG Germany Jan Stoelting is a partner at KPMG Germany and is recognized as a leading specialist in the strategic and operational design of information security. His work focuses on security governance, security operations and SAP security, areas in which he has been successfully responsible for projects in various industries for many years. In his role as Global Lead for SAP Security, he drives the global development of the KPMG service portfolio and supports international companies in securing business-critical SAP landscapes. He is also an author of specialist articles and publications and regularly appears as a speaker at renowned industry events. Host 1: Richard Howells, SAP Richard Howells has been working in the Supply Chain Management and Manufacturing space for over 30 years. He is responsible for driving the thought leadership and awareness of SAP’s ERP, Finance, and Supply Chain solutions and is an active writer, podcaster, and thought leader on the topics of supply chain, Industry 4.0, digitization, and sustainability. Follow Richard Howell on LinkedIn and X Host 2: Oyku Ilgar, SAP Oyku Ilgar is a marketer and thought leader specializing in SAP’s digital supply chain and ERP solutions since 2017. As a marketer, blogger, and podcaster, she creates engaging content that highlights innovative SAP technologies and explores key topics including business trends, AI, Industry 4.0, and sustainability. Follow Oyku Ilgar on LinkedIn and SAP Community
