Compared to the on-premise model, where you as a customer retain your own responsibility for the application and data, SAP as cloud service providers own responsibility of securing everything under the application, including database, operating system and server, storage, and networking.
Note that SAP actually uses cloud service providers such as AWS, Microsoft Azure, or GCP to provide server, storage, and networking resources and services, so the cloud service providers have a role to play as well. However, for RISE with SAP customers, its one contract with SAP, and SAP takes care of managing he cloud infrastructure in cloud accounts owned by SAP, specific to each customer, to host their SAP application and private virtual cloud
SAP RISE provided a service called Enhanced Operations Service. This was an additional purchase which will allow Syensqo to access the logs and data for monitoring and threat detection via LogServ. LogServ will enable Syensqo to collect and centralize logs generated by the Cloud Service from all Systems and applications that are in use. LogServ provides the following capabilities:
• Near real-time log collection,
• Ability to integrate with Customer’s SIEM or Log Management system, and
• Log recovery.
The standard retention policy is one year; however, this retention policy may be extended via a Change Request (as described in the Order Form) and subject to additional fees.
Syensqo's current SIEM solution is Google. Currently Google SIEM does not integrate as standard with SAP RISE.