# SAP: CFOs must address the unnecessary risk of Indirect Access
Author:  Pal Sinha, Barnali 
Author URL: https://financedigest.com/author/pal-sinha-barnali
Published: 2017-09-19
Category: BUSINESS
Category URL: https://financedigest.com/category/business
Meta Title: Understanding SAP's Indirect Access: A CFO's Guide
Meta Description: Discover the risks and financial penalties of Indirect Access to SAP software, and how multinationals can avoid unexpected fees. Stay informed for your
URL: https://financedigest.com/sap-cfos-must-address-the-unnecessary-risk-of-indirect-accesshtml

![undefined](https://prod.superblogcdn.com/site_cuid_cm5qst7v3003gwirgwqtxn8i8/images/fd190917-1-1736843480957-compressed.jpg)

_By **Matt Fisher**, VP at Snow Software_

![Matt Fisher](https://prod.superblogcdn.com/site_cuid_cm5qst7v3003gwirgwqtxn8i8/images/matt-fisher-200x300-1736843480899-compressed.jpg)

Matt Fisher

For many organisations, SAP forms a critical part of business infrastructure. [Enabling companies](https://www.financedigest.com/game-company-roblox-enabled-girls-sexual-exploitation-lawsuit-claims.html "Game company Roblox enabled girl’s sexual exploitation, lawsuit claims") to run their business processes effortlessly across multiple functions, be they accounting, sales, production, human resources or payment in an integrated environment, SAP isan essential cog in the business technology machine.

Though SAP has never been fondly looked upon by CFOs, many have been forced to accept consistently increasing bills as organisations increase their reliance on its software. This has led to SAP becoming a necessary evil for the finance department, where [paying unscrutinised high costs](https://www.financedigest.com/factbox-strikes-protests-in-europe-over-cost-of-living-and-pay-2.html "Factbox-Strikes, protests in Europe over cost of living and pay") is significantly less risky than the potential consequences.

However, SAP’s  changing relationship with its customers is now becoming one to make CFOs sit up and [pay attention](https://www.financedigest.com/why-should-investors-be-paying-more-attention-to-open-source-software.html "Why should investors be paying more attention to open source software?"). In recent months, the software giant’s approach to retrospectively recouping license fees has raised eyebrows, as the firm is pursuing its own clients for what it stipulates are unpaid fees for Indirect Access to its software.

In February 2017, the UK High Court ruled in favour of SAP against British multinational [alcoholic beverages](https://www.financedigest.com/the-rtd-alcoholic-beverages-market-to-grow-beyond-the-odds-of-mediocrity.html "The RTD Alcoholic Beverages Market To Grow Beyond The Odds Of Mediocrity") firm Diageo for £54 million, in an Indirect Access case stemming from unpaid fees.

Just two months ago brewing giant Anheuser-Busch InBev (AB InBev) [revealed in a US Securities and Exchange Commission filing that SAP is seeking £471 million](https://www.financedigest.com/revealed-1-45-million-tonnes-of-e-waste-is-produced-by-households-businesses-per-annum.html "Revealed: 1.45 million tonnes of e-waste is produced by households & businesses per annum") (US $600 million) in compensation for unlicensed use of its software.That’s a big deal, one that gets the attention of CFOs, [CEOs and the board](https://www.financedigest.com/oranges-board-selects-three-candidates-for-new-ceo-sources.html "Orange’s board selects three candidates for new CEO – sources").

But, what is Indirect Access, and how can other multinationals avoidthe agony of stumping up for the huge unbudgeted, unplanned fees?

**Understanding Indirect Access**

Previously, licensing reviews and system measurements for SAP focussed on direct usage for an organisation’s SAP environment. A definition for direct usage involves a single user accessing SAP data through the SAP interface.

Indirect Access arises when an SAP [system](https://www.financedigest.com/telehealth-monitoring-to-rule-the-the-transseptal-access-systems-market.html "Telehealth monitoring to rule the The Transseptal Access Systems Market") is accessed, or queried, via a third-party application. For example, if a Sales-force report is [linked back](https://www.financedigest.com/eu-lawmakers-back-ban-on-goods-linked-to-deforestation.html "EU lawmakers back ban on goods linked to deforestation") to an organisation’s SAP system to generate a weekly performance report, every sales person may be able to access it even if they’re not a licensed user.

Although no two contracts from SAP are the same, the core principles are. Both the number of users, and their level, is measured for SAP licensing. Moreover, while previously SAP didn’t monetise Indirect Access, most contracts stipulate that every type of usage must be paid and accounted for – whether direct or indirect.

**Cause for concern?**

Theoretically, any SAP customer running applications that indirectly access their SAP [system is as much at risk](https://www.financedigest.com/demystifying-us-feds-approach-on-systemic-climate-risk-stress-testing.html "Demystifying US Fed’s approach on Systemic Climate Risk Stress Testing") of financial penalty as Diageo and AB Inbev (proportionate to annual turnover, of course). However, those at the greatest [risk are undoubtedly organisations with operations](https://www.financedigest.com/mitigating-operational-risk-through-centralising-reconciliation.html "MITIGATING OPERATIONAL RISK THROUGH CENTRALISING RECONCILIATION") involving high volumes of transactions, which require data flowing out of, and back into the SAP system. A prime example being those with complex [supply chains](https://www.financedigest.com/volkswagen-sticks-to-outlook-as-size-offset-supply-chain-woes.html "Volkswagen sticks to outlook as size offset supply chain woes") or partner networks, such as in the Consumer Packaged Goods (CPG) industry.

The risks are also heightened for SAP’s larger users, who have often upped their [investment in SAP systems](https://www.financedigest.com/rising-investments-in-renewable-power-generation-to-amplify-demand-of-substation-monitoring-system-market-fact-mr-report.html "Rising Investments in Renewable Power Generation to Amplify Demand of Substation Monitoring System Market: Fact.MR Report") year-on-year, to the point that it has become a business-critical piece of IT infrastructure. Replacing SAP systems with a different ERP system, for such users, would be comparable to relocating both the offices of an entire organisation and its partnering outposts simultaneously – an unthinkable task.

In very simple terms, the bigger and more complex your [supply chain](https://www.financedigest.com/supply-chain-management-bpo-market-is-thriving-with-rising-latest-trends-2014-2020.html "Supply Chain Management BPO Market Is Thriving With Rising Latest Trends 2014 – 2020") and partner network, the more of a target you are likely to be.

**Changing how you approach SAP**

The true cost of an SAP implementation can be unknown within a large enterprise, with no single owner of all SAP investments.Adoption may have occurred over years as organisations have merged and grown.The resulting lack of centralised clarity of spend has in some cases meant that spending on SAP has, in effect, been beyond scrutiny.

CFOs need to change how they approach SAP, moving away from begrudgingly signing off [rising costs](https://www.financedigest.com/fortum-says-rising-costs-of-nordic-power-trading-are-worrying.html "Fortum says rising costs of Nordic power trading are “worrying”"), to scrutinising the deployment and its associated risks. Only with greater visibility into how SAP is being used organisation-wide can CFOs hope to avoid being in the same position as AB Inbevand Diageo.

To reduce the business’s immediate financial vulnerability and mitigate risk, [CFOs must](https://www.financedigest.com/10-questions-cfos-must-ask-themselves-about-privacy.html "10 questions CFOs must ask themselves about privacy") ensure that their SAP teams have the means to uncover future risks before they arise. The first thing organisations should do is produce a full schematic of the SAP infrastructure with routes both in and out of the system, in order to accurately evaluate indirect licensing costs, as well as dig deeper into direct licensing costs too.

Only once full visibility into the full usage of SAP is known can it reveal any potential risk to the business.

**You can find out more information about how to minimise exposure by watching our webinar – _SAP Indirect Usage risk is real: Five-step plan to minimize exposure_–** [**here**](https://go.snowsoftware.com/CORP-SAP-Indirect-Usage-2-register.html?utm_source=Blog&utm_medium=Online&utm_campaign=SAP17) **.**


---
This blog is powered by Superblog. Visit https://superblog.ai to know more.
---