Managing Customer-Owned Encryption with the New Key Management Service | feat. Sascha Vierlinger

<p><em>Niklas Siemer is joined by Sascha Vierlinger, Product Manager for SAP Key Management service, to unpack customer-owned encryption in cloud landscapes—and why more organizations want control of the “last layer” of trust: the keys.</em></p><p><br></p><p>They walk through why encryption matters more in the cloud, the difference between SAP-managed vs. customer-managed keys, and what a modern Key Management Service (KMS) needs to deliver: secure key storage, lifecycle controls (enable/disable/delete), auditability, and operational safeguards like the four-eyes principle. The conversation also covers the classic “red button” scenario (cutting off access fast in an emergency), and how SAP’s new KMS is designed as a more scalable, central approach compared to the legacy SAP Data Custodian KMS.</p><p><br></p><p><strong></strong><a href="https://sap-podcast-bucket.s3.amazonaws.com/cloud-platform/25-11-unlocking-sap-btp-124-PDF-Transcript.pdf">⁠<strong>Download Episode Transcript</strong>⁠</a><strong></strong></p><p><br></p><p><strong>In this episode, you&#39;ll learn:</strong></p><p><br></p><ul><li>Why who controls the key is effectively who controls the data (especially in regulated industries).</li><li>The three models for key control: Sub-managed keys, Bring Your Own Key (BYOK), and Hold Your Own Key (HYOK).</li><li>What &quot;key lifecycle&quot; really means (rotation, disabling, deletion—and the very real risks).</li><li>How SAP&#39;s new KMS supports stronger governance with audit logs and multi-party approvals.</li><li>What to expect commercially (licensed product + connections) and how this fits with SAP BTP usage.</li></ul><p><br></p><p>=====</p><p><br></p><p><strong>Useful Links</strong></p><p><br></p><ul><li><a href="https://help.sap.com/docs/key-management-service" target="_blank" rel="ugc noopener noreferrer">Key Management Service Product Documentation</a></li><li><a href="https://www.sap.com/products/technology-platform/governance-risk-compliance.html" target="_blank" rel="ugc noopener noreferrer">More about GRC and cybersecurity</a></li></ul><p><br></p><p><strong>Subscribe to the Unlocking SAP BTP Podcast:</strong></p><ul><li><a href="https://podcasts.apple.com/us/podcast/sap-btp-talk/id990578446" target="_blank" rel="ugc noopener noreferrer">Apple Podcasts</a></li><li><a href="https://open.spotify.com/show/6bfUFNbjMX85U9V49KFNhq" target="_blank" rel="ugc noopener noreferrer">Spotify</a></li><li><a href="https://www.youtube.com/user/saptechno