As AI agents become active participants in business processes, organisations must protect more than their technology landscape. Following its move to RISE with SAP, Queensland’s Department of Transport and Main Roads recognised the need to extend security into the business logic, data and decisions that AI can influence.

Working with SAP security specialists, TMR developed a business-led approach spanning governance, assurance, threat modelling and incident readiness. Using procure-to-pay as a high-risk scenario, TMR applied threat modelling at the business-process level, translated SAP’s shared-responsibility model into clear operational accountabilities, and tested its resilience through a business-led cyber incident exercise. Hear how this approach strengthened audit readiness, established a repeatable SAP incident playbook and better prepared TMR to manage emerging AI-related security risks.

What You’ll Learn

• How to extend SAP security into business processes, data and decision-making.
• How process-level threat modelling can help assess agentic AI risks.
• How to turn shared responsibility and incident readiness into practical business capabilities.