Academy · AI in SAP · 300 Professional
AI Governance for SAP Programs: EU AI Act, SAP Responsible AI and Agent Controls
AI governance is now a project deliverable. This course explains the EU AI Act and its current dates after the Digital Omnibus (Regulation (EU) 2026/1744 moved Annex III high-risk duties to 2 December 2027), which SAP use cases may be high-risk, what SAP's responsible AI framework and ISO/IEC 42001 certification do and don't cover for you, and the controls an SAP program needs for AI features and agents: inventory, risk classification, human oversight, logging, kill switches and evidence.
- 52 minutes
- 6 lessons + quiz
- Security & GRC Specialist, Program / PMO Lead, Solution Architect, Process Owner
Start the course
- 01The EU AI Act in one lesson, including the Digital Omnibus11 min
- 02Where SAP AI use cases fall8 min
- 03What SAP provides and what you own8 min
- 04Controls for agents: permissions, approvals, logs and kill switches9 min
- 05The AI inventory and the governance evidence pack8 min
- 06Keeping AI governance current8 min
- QZCourse quiz12 questions
What you’ll be able to do
- Summarize EU AI Act obligations and current application dates, including the Digital Omnibus changes
- Classify SAP AI use cases by risk and identify likely high-risk areas
- Explain SAP's Global AI Ethics Policy, AI Ethics Handbook and ISO 42001 certification and what they do and do not cover for customers
- Define controls for agents: permissions, approvals, logging, monitoring and incident handling
- Build an AI inventory and governance evidence pack for an SAP program, using the NIST AI RMF as a practical checklist
- Set a review cadence that keeps AI governance current with regulation, SAP terms and features
Sources and further reading
- Regulation (EU) 2026/1744 (Digital Omnibus on AI) · EUR-Lex, Official Journal of the European Union
- Regulation (EU) 2024/1689 (Artificial Intelligence Act) · EUR-Lex, Official Journal of the European Union
- Responsible AI (SAP Global AI Ethics Policy, AI Ethics Handbook, ISO 42001) · SAP
- Integrating Joule Agents into Your Ecosystem (Agent Gateway identity and audit logging) · SAP Architecture Center
- AI Risk Management Framework · NIST
- Third-Party MCP Access to SAP Solutions (logging and identity controls) · SAP Architecture Center
- SAP API Policy (v.4.2026a) · SAP Help Portal