Managing Customer-Owned Encryption with the New Key Management Service | feat. Sascha Vierlinger

<p><em>Niklas Siemer is joined by Sascha Vierlinger, Product Manager for SAP Key Management service, to unpack customer-owned encryption in cloud landscapes—and why more organizations want control of the “last layer” of trust: the keys.</em></p><p><br></p><p>They walk through why encryption matters more in the cloud, the difference between SAP-managed vs. customer-managed keys, and what a modern Key Management Service (KMS) needs to deliver: secure key storage, lifecycle controls (enable/disable/delete), auditability, and operational safeguards like the four-eyes principle. The conversation also covers the classic “red button” scenario (cutting off access fast in an emergency), and how SAP’s new KMS is designed as a more scalable, central approach compared to the legacy SAP Data Custodian KMS.</p><p><br></p><p><strong></strong><a href="https://sap-podcast-bucket.s3.amazonaws.com/cloud-platform/25-11-unlocking-sap-btp-124-PDF-Transcript.pdf">⁠<strong>Download Episode Transcript</strong>⁠</a><strong></strong></p><p><br></p><p><strong>In this episode, you&#39;ll learn:</strong></p><p><br></p><ul><li>Why who controls the key is effectively who controls the data (especially in regulated industries).</li><li>The three models for key control: Sub-managed keys, Bring Your Own Key (BYOK), and Hold Your Own Key (HYOK).</li><li>What &quot;key lifecycle&quot; really means (rotation, disabling, deletion—and the very real risks).</li><li>How SAP&#39;s new KMS supports stronger governance with audit logs and multi-party approvals.</li><li>What to expect commercially (licensed product + connections) and how this fits with SAP BTP usage.</li></ul><p><br></p><p>=====</p><p><br></p><p><strong>Useful Links</strong></p><p><br></p><ul><li><a href="https://help.sap.com/docs/key-management-service" target="_blank" rel="ugc noopener noreferrer">Key Management Service Product Documentation</a></li><li><a href="https://www.sap.com/products/technology-platform/governance-risk-compliance.html" target="_blank" rel="ugc noopener noreferrer">More about GRC and cybersecurity</a></li></ul><p><br></p><p><strong>Subscribe to the Unlocking SAP BTP Podcast:</strong></p><ul><li><a href="https://podcasts.apple.com/us/podcast/sap-btp-talk/id990578446" target="_blank" rel="ugc noopener noreferrer">Apple Podcasts</a></li><li><a href="https://open.spotify.com/show/6bfUFNbjMX85U9V49KFNhq" target="_blank" rel="ugc noopener noreferrer">Spotify</a></li><li><a href="https://www.youtube.com/user/saptechnology" target="_blank" rel="ugc noopener noreferrer">YouTube</a></li></ul><p><br></p><p>=====</p><p><br></p><p><strong>About the speakers:</strong></p><p><br></p><p><em><strong>Sascha Vierlinger</strong></em></p><p><strong>Product Manager, SAP Key Management Service</strong></p><p>Sascha is Product Manager for Key Management at SAP. He has more than 15 years of SAP experience in consulting and product management and is certified SAP Enterprise Architect.</p><p>Follow Sascha on: <a href="https://www.linkedin.com/in/sascha-vierlinger" target="_blank" rel="ugc noopener noreferrer">LinkedIn</a></p><p><br></p><p><strong>Hosted by </strong><em><strong>Niklas Siemer</strong></em></p><p><strong>Senior Product Specialist SAP Business Technology Platform</strong></p><p>Niklas is a passionate Product Manager for SAP BTP with a strong background in software development, primarily using Java and Node.js. He co-hosts the Unlocking SAP BTP (formerly SAP BTP Talk) podcast, where he explores SAP BTP topics in monthly deep dives. Before his current role, Niklas worked as a Learning Specialist, creating and delivering technical training on SAP BTP and the ABAP Platform.</p><p>Follow Niklas on: <a href="https://www.linkedin.com/in/niklas-siemer" target="_blank" rel="ugc noopener noreferrer">LinkedIn</a></p><p><br></p><p>=====</p><p><br></p><p><strong>Connect With the Unlocking SAP BTP Podcast</strong></p><ul><li><a href="https://www.facebook.com/SAPTechnology/" target="_blank" rel="ugc noopener n