The DSAG Annual Congress offers exchange, networking, and knowledge transfer for the SAP community, taking place October 6–8, 2026, at Koelnmesse.
Simply click "Learn More" to find out more about the DSAG Annual Congress 2026.
Learn More →In 2026, the German-speaking SAP User Group (DSAG) invites attendees to Koelnmesse from October 6 to 8: three days of exchange, networking, and knowledge transfer.
Under the motto "Claim your Ground. Lead your Business.," the focus isn't on the next buzzword or innovation promise, but on well-founded decisions in dealing with change: perspective over hype, value assessment over slogans, and problem-solving over blind activism. S/4HANA, cloud, BTP, AI, and automation projects are running in parallel amid rising complexity, dynamic roadmaps, and high expectations.
Companies should consciously define their scope for action and design, take responsibility, and move at their own pace—shifting from being driven by change to actively shaping it.
More Information →
Head of Direct Sales
Book a Meeting →
Teamlead Channel Sales
Book a Meeting →Together, we'll build the decision-making foundation for your next investments in IT solutions and SAP software.
At our booth, we're available for all your questions about SAP security—we look forward to the conversation.
You'll find more information about the event, the program, and tickets for the DSAG Annual Congress 2026 here.
More Information →Koelnmesse
Messeplatz 1
50679 Cologne
Germany
Compliance Gaps Despite a GRC Tool? AI-Powered Rulesets Instead of Standard Catalogs
October 7, 2026 | 5:45–6:30 PM
Thomas Tiede
Strategic Advisor, Xiting GmbH
Lukasz Ferenc
Senior Architect SAP Security & Governance, Fresenius Digital Technology GmbH
What rules do I actually need in my ruleset? Do my rules match my business processes? What do DORA, NIS2, SOX, and other regulations require—and how much of that is already covered in my ruleset? These aren't theoretical questions. They're classic pain points for every organization, and they usually go unanswered.
The reason: standard rulesets aren't designed to reflect an organization's individual risk profile. They measure generically, regardless of industry, country, or regulatory environment. The result is findings with little real significance and rulesets that don't hold up under audit.
AI changes that—automatically, based on a curated library of regulatory references and a company-specific profile. The result: a ruleset with clear references to standards (including ISO 27001, NIS2, and DORA) that is methodologically sound, traceable, and audit-proof.
This session shows what makes a resilient ruleset, how to assess your own ruleset, and which steps lead beyond the standard catalog.
Follow @Xiting and @xiting.global on social media.
You are currently viewing a placeholder content from Vimeo. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More InformationYou are currently viewing a placeholder content from YouTube. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More InformationYou need to load content from reCAPTCHA to submit the form. Please note that doing so will share data with third-party providers.
More InformationYou are currently viewing a placeholder content from Facebook. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More InformationYou need to load content from hCaptcha to submit the form. Please note that doing so will share data with third-party providers.
More InformationYou need to load content from reCAPTCHA to submit the form. Please note that doing so will share data with third-party providers.
More InformationYou need to load content from Turnstile to submit the form. Please note that doing so will share data with third-party providers.
More InformationYou are currently viewing a placeholder content from Hubspot Embedded Content. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More InformationYou are currently viewing a placeholder content from Hubspot Meetings. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More InformationYou are currently viewing a placeholder content from Instagram. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More InformationYou are currently viewing a placeholder content from X. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More Information