Cybersecurity is often treated as a workstream within a cloud transformation.

At Under Armour, it became a foundational design principle from Phase Zero. As the organisation embarked on its RISE with SAP journey, one lesson quickly became clear: moving to the cloud does not mean transferring responsibility for security. Understanding the shared responsibility model, establishing clear governance, and designing secure cloud architecture from the outset were critical to the program's success.

In this session, Under Armour shares practical lessons from its RISE transformation, including how security was embedded into project planning, how stakeholders were educated on their ongoing responsibilities, and what was learned while implementing a Zero Trust approach across cloud environments. Whether you're evaluating RISE, planning a migration, or already underway, this session will help you better understand what security ownership looks like in a cloud-first SAP landscape.

What You'll Learn

• How the RISE with SAP shared responsibility model works in practice and where customer accountability remains.
• Why security and governance decisions made during Phase Zero have a lasting impact on transformation success.
• Key lessons from designing secure cloud architecture, including network segmentation, VPCs, subnets, and Zero Trust principles.
• How to establish visibility, reporting, and governance processes that help you trust—but verify—your cloud security posture.