Technology: BTP

This policy establishes the governance framework, requirements, and processes for managing secrets, keys, and certificates across the SAP Business Technology Platform — service keys and bindings, application secrets, credential storage, encryption keys, and certificate lifecycle.

This policy establishes the governance framework, requirements, and processes for securing integration and APIs on the SAP Business Technology Platform — API authentication and management, integration flows, event and messaging security, partner governance, and payload protection.

This policy establishes the governance framework, requirements, and processes for securing connectivity and network communication across the SAP Business Technology Platform — the Cloud Connector, destinations, private connectivity, transport encryption, exposure, and identity propagation.

This policy establishes the governance framework, requirements, and processes for securely configuring and hardening the SAP Business Technology Platform — from the global account and directory structure through subaccounts, entitlements, and the Cloud Foundry, Kyma, and ABAP environments — and for keeping configuration in a known-good state.

This policy establishes the governance framework, requirements, and processes for identity and access management across the SAP Business Technology Platform — identity federation and trust, authentication, authorization through role collections, administrative and emergency break-glass access, non-human identities, and identity lifecycle across all BTP environments.