Rise with SAP – Safe and CompliantAbout the conference
The SAP Academic Community Conference DACH 2026 took place on 7–8 September at the Würth-Haus in Rorschach, Switzerland, under the theme “Human-Driven Artificial Intelligence.” Organised by the SAP Competence Center of HES-SO Valais-Wallis, OST – Eastern Switzerland University of Applied Sciences, the SAP Academic Board DACH, and SAP University Alliances, it brought together experts from business, research, and education.
The conference provided a space to discuss responsible AI in business and IT, share research and practical projects, and strengthen collaboration between universities and companies. Set on the shores of Lake Constance, Rorschach offered a fittingly inspiring backdrop for two days of exchange between academia and industry.
A Co-Innovation Excellence Award OST and Riscomp
The SAP University Alliances Co-Innovation Excellence Membership Award was granted to an applied project conducted by students from OST – Eastern Switzerland University of Applied Sciences, sponsored and coached by Riscomp.
SAP University Alliances members voted anonymously and selected our project. They were particularly impressed by how the complex topic of Governance, Risk and Compliance (GRC) was introduced into an academic setting and successfully addressed through practical research.
Big thanks to the students, lecturers, and professors for the great collaboration!
Inside the Project: The challenge
Cyber risks are often assessed using technical scores, qualitative categories, and probability-based models. While these methods support detailed analysis, they do not always make the financial and business process impact clear to business decision-makers.
Our approach: Building on Riscomp’s proprietary methodology, the study developed the Asset Risk Linkage Model (ARLM), an asset-centric framework that connects information assets with business processes, IT systems, cyber risks, and mitigation measures. OST’s independent analysis combined selected elements of BSI IT-Grundschutz, the OWASP Risk Rating Methodology, and FAIR with newly developed methodological components, extending Riscomp’s original approach with additional academic grounding.
The model supports transparent, reproducible risk assessments in SAP and ERP environments, and enables organisations to express both inherent and residual cyber risk in monetary terms, including measurable values in CHF. The work independently validates and extends Riscomp’s broader methodology for linking risk, compliance, and strategy to measurable assets across an organisation — the same asset-centric approach at the core of Riscomp’s product vision.
Read more about our collaboration with OST.