SANS maps SAP cybersecurity to the CIS Critical Security Controls list
via IT Help Net Security