How Decathlon Secures 22 SAP Systems and 30,000 Users with SecurityBridge
Chapters
Share Article
Let's Talk SAP Security
Have questions about SAP Security? We’re here to help. Contact Us
Decathlon is one of the world’s largest sporting goods companies, designing, manufacturing, and distributing gear to customers in more than 50 countries. Behind that global footprint sits a complex SAP landscape: roughly 22 production systems and up to 30,000 users, spanning ABAP, Java, and SAP BTP, running mostly on premises with web connectors, SAP Web Dispatcher, and cloud touchpoints layered on top.
Keeping a landscape of that scale secure and audit-ready is no small task. We sat down with Jérôme Decamps, SAP Security Officer at Decathlon Digital, to hear how his team approaches SAP Cybersecurity and why SecurityBridge became part of that approach.
Prefer to hear it directly from Jérôme? Watch the full interview (in french) below:
Powering Supply Chains at Global Scale
“Decathlon is a designer, manufacturer, and distributor of sporting goods with a presence in more than 50 countries.”
“For our supply chain, we use a suite of SAP systems to manage the restocking of our warehouses and stores, and to determine the production levels needed to maintain our supply.”
In other words: SAP isn’t a back-office system at Decathlon; it’s the operational backbone that keeps products moving from production to shelf, worldwide. Any gap in the security or integrity of that landscape has consequences far beyond IT.
The Challenge: Standard Tools, Manual Effort
Before SecurityBridge, Jérôme’s team relied on standard SAP tools, configuration validation, system recommendations, and similar native capabilities. It worked, but it came at a cost.
“I spent a lot of time building my reports.”
That’s a familiar story for SAP Cybersecurity teams: the raw data is there, but turning it into something actionable and audit-ready takes significant manual effort, repeatedly, system by system.
Why SecurityBridge
For Jérôme, the shift came down to speed to value.
“The advantage of SecurityBridge is that it provides a pre-packaged security policy that can be tailored to the client’s needs, and all the tools needed to generate results are immediately operational.”
That’s the SAP-native difference: rather than bolting on external tooling and building detection logic from scratch, Decathlon’s team gets a complete, fully integrated platform — the only one of its kind for SAP — embedded directly in SAP and productive from day one.
No additional hardware, no separate infrastructure to maintain, with the flexibility to tailor policies to their own environment.
A 360° View Across the Landscape
Today, Decathlon uses SecurityBridge across the full breadth of the platform:
- Security & Compliance — verifying that systems comply with security policies on an ongoing basis
- Patch Management — tracking the deployment of SAP security patches
- Event Management — monitoring system activity in real time, so the team can act on suspicious behavior rather than simply collecting alerts
- Custom code review — reviewing custom ABAP code to ensure it’s free of vulnerabilities before it reaches production
Together, these give Jérôme’s team one integrated, 360° view of security and compliance posture rather than a patchwork of point tools and manual checks.
Scale Without Compromise
Decathlon’s SAP footprint isn’t small: roughly 22 production systems and up to 30,000 users, running mostly on-premises across ABAP and Java, with SAP BTP, web connectors, SAP Web Dispatcher, and cloud connectivity all in scope.
22 production systems • Up to 30,000 users • ABAP, Java & SAP BTP
“Yes, exactly,” Jérôme confirms when asked whether all those web connectors, Web Dispatcher, and cloud fall under SecurityBridge’s coverage.
That’s the difference between a bolt-on tool and a single, fully integrated platform built to cover an entire SAP landscape end to end.
From Manual Reports to Real-Time Coverage
For Decathlon, SecurityBridge replaced hours of manual report-building with a pre-packaged, tailored, and immediately operational SAP Cybersecurity platform, giving the team continuous compliance verification, real-time monitoring, patch tracking, and custom code analysis across tens of thousands of users and dozens of systems, without adding operational overhead.
From manual reporting to continuous SAP security visibility across 22 production systems and up to 30,000 users.
Want to see what a complete, fully integrated SAP Cybersecurity platform the only one of its kind for SAP can do for your landscape? Request a demo to find out.