operationalizing SAP cybersecurity