tiprankstipranks
SAP AG (SAP)
NYSE:SAP
US Market
Holding SAP?
Track your performance easily

SAP AG (SAP) Risk Factors

2,331 Followers
Public companies are required to disclose risks that can affect the business and impact the stock. These disclosures are known as “Risk Factors”. Companies disclose these risks in their yearly (Form 10-K), quarterly earnings (Form 10-Q), or “foreign private issuer” reports (Form 20-F). Risk factors show the challenges a company faces. Investors can consider the worst-case scenarios before making an investment. TipRanks’ Risk Analysis categorizes risks based on proprietary classification algorithms and machine learning.

SAP AG disclosed 13 risk factors in its most recent earnings report. SAP AG reported the most risks in the “Tech & Innovation” category.

Risk Overview Q4, 2023

Risk Distribution
13Risks
31% Tech & Innovation
23% Ability to Sell
15% Finance & Corporate
15% Legal & Regulatory
8% Production
8% Macro & Political
Finance & Corporate - Financial and accounting risks. Risks related to the execution of corporate activity and strategy
This chart displays the stock's most recent risk distribution according to category. TipRanks has identified 6 major categories: Finance & corporate, legal & regulatory, macro & political, production, tech & innovation, and ability to sell.

Risk Change Over Time

2020
Q4
S&P500 Average
Sector Average
Risks removed
Risks added
Risks changed
SAP AG Risk Factors
New Risk (0)
Risk Changed (0)
Risk Removed (0)
No changes from previous report
The chart shows the number of risks a company has disclosed. You can compare this to the sector average or S&P 500 average.

The quarters shown in the chart are according to the calendar year (January to December). Businesses set their own financial calendar, known as a fiscal year. For example, Walmart ends their financial year at the end of January to accommodate the holiday season.

Risk Highlights Q4, 2023

Main Risk Category
Tech & Innovation
With 4 Risks
Tech & Innovation
With 4 Risks
Number of Disclosed Risks
13
No changes from last report
S&P 500 Average: 31
13
No changes from last report
S&P 500 Average: 31
Recent Changes
0Risks added
0Risks removed
2Risks changed
Since Dec 2023
0Risks added
0Risks removed
2Risks changed
Since Dec 2023
Number of Risk Changed
2
-2
From last report
S&P 500 Average: 3
2
-2
From last report
S&P 500 Average: 3
See the risk highlights of SAP AG in the last period.

Risk Word Cloud

The most common phrases about risk factors from the most recent report. Larger texts indicate more widely used phrases.

Risk Factors Full Breakdown - Total Risks 13

Tech & Innovation
Total Risks: 4/13 (31%)Above Sector Average
Trade Secrets1 | 7.7%
Trade Secrets - Risk 1
Legal and IP: Claims and lawsuits against us, such as for IP infringements, or our inability to obtain or maintain adequate licenses for third-party technology, or if we are unable to protect or enforce our own intellectual property, may result in adverse outcomes.
We have in the past, and believe that we will continue to be subject to, claims and lawsuits, including intellectual property infringement claims, as our solution portfolio grows; as we acquire companies with increased use of third-party code including open source code; as we expand into new industries with our offerings, resulting in greater overlap in the functional scope of offerings; and as non-practicing entities that do not design, manufacture, or distribute products assert intellectual property infringement claims. Moreover, protecting and defending our intellectual property is crucial to our success. The outcome of litigation and other claims or lawsuits is intrinsically uncertain. We are subject to risks and associated consequences in the following areas, among others: dependency in the aggregate on third-party technology, including cloud and Web services, that we embed in our products or that we resell to our customers; integration of open source software components from third parties into our software and the implications derived from it; inability to prevent third parties from obtaining, using, or selling without authorization what we regard as our proprietary technology and information; and the possibility that third parties might reverse-engineer or otherwise obtain and use technology and information that we regard as proprietary. Moreover, the laws and courts of certain countries might not offer effective means to enforce our legal or intellectual property rights. Finally, SAP may not be able to collect or otherwise enforce all judgments awarded to it in legal proceedings. The outcome of litigation and other claims or lawsuits is intrinsically uncertain. Management's view of the litigation might also change in the future. Actual outcomes of litigation and other claims or lawsuits could differ from the assessments made by management in prior periods, which are the basis for our accounting for these litigations and claims under IFRS.
Cyber Security2 | 15.4%
Cyber Security - Risk 1
Cybersecurity and Security: Cybersecurity attacks or breaches, and security vulnerabilities in our infrastructure or services or those of our third-party partners could materially impact our business operations, products, and service delivery.
SAP delivers a full portfolio of solutions, hosts or manages elements of our customers' businesses in the cloud, processes large amounts of data, and provides mobile solutions to users. While SAP executes each of these areas either directly or through partners and other third parties, our industry continues to experience a complex and threatening cybersecurity landscape. The severity of these cybersecurity threats is amplified due to the increasingly sophisticated and malicious global landscape in which we operate. This includes third-party data, products, and services that we incorporate into SAP products and services, and the increasingly advanced obfuscation, control-circumvention, and related techniques and tools – such as artificial intelligence – employed by threat actors targeting IT products, businesses, and the supply chain. When we become aware of unauthorized access to our systems or those of our third-party partners, we have action plans in place intended to identify and remediate the source and impact of such events. Like many companies, we and certain of our third-party partners have experienced and expect to continue to experience cyberattacks and other security incidents that affect our business. While we experience cybersecurity incidents of various kinds in the ordinary course of our business, we are not aware of any such incidents that have had a material impact on our business. We are subject to risks and associated consequences in many areas including, but not limited to, an increasing number of global threat actor attacks using ransomware as their preferred method of attack as well as exploiting known and unknown bugs, errors and vulnerabilities in our software and systems or those of business partners, customers or other third parties. Given the nature of complex systems, software and services like ours, and the scanning tools that we deploy across our networks and products, we regularly identify and track security vulnerabilities. Security vulnerabilities are prioritized based on known and anticipated risks, and remediation activities aim to patch within the designated timeframes. Although we have standard routine patch management processes, we are unable to comprehensively apply patches or to confirm that mitigating measures are in place to mitigate all such vulnerabilities, or that any patches will be applied before exploitation by a threat actor. In other situations, vulnerabilities persist even after we have issued security patches, because our customers may fail to either apply the patches, update their systems, or authorize service downtime sufficient to allow for patching by SAP. If attackers are able to exploit vulnerabilities before patches are installed or mitigating measures are implemented, significant compromises could impact our and our customers' systems and data. We could also experience material exposure to our business operations and service delivery due to disruptions to backups, disaster recovery or business-continuity management processes, or as the result of malicious or inadvertent actions by threat actors, employees, contractors, or a host of other parties. Security threats may also exist due to delayed or insufficient responses to identified issues or other interdependencies such as cloud service providers and those beyond SAP's cybersecurity infrastructure and protocols. SAP's and/or its partners' lack of sufficient security controls or compliance with existing controls could impact SAP's and/or its partners' ability to comply with applicable regulations and customer requirements. SAP and/or its partners could unknowingly introduce security threats and vulnerabilities without established security evaluation processes. Additionally, failure to integrate or maintain SAP's cybersecurity infrastructure and protocols with network systems obtained through acquisitions could result in cyberbreaches, a loss of data confidentiality and integrity, and/or a loss of system availability.
Cyber Security - Risk 2
Changed
Cloud Operations: We may not be able to properly protect and safeguard our critical information and assets, business operations, cloud offerings and portfolio presentation, and related infrastructure against cyberattacks, insufficient infrastructure, disruption, or deficient performance.
SAP is highly dependent on the availability, integrity, and reliability of our infrastructure, including infrastructure provided by third-party business partners, and the software used in our cloud portfolio is inherently complex. Customers using our cloud services rely on the security of our infrastructure to protect the availability of our services and the data that they store on our infrastructure. Threat actors are focused on attacking third-party product and service providers, such as SAP, as a means of compromising our and our downstream customers' systems and data. We are subject to risks and associated consequences in the following areas, among others: the cloud portfolio or strategic direction of cloud operations may not fully meet customer demands; customers' cloud service demands may not match our data center capacity or control investments; capacity shortages could affect SAP's ability to deliver and operate cloud services as expected by or committed to our customers; scalability demands on infrastructure and operation could lead to cost increases and margin impacts; hyperscaler or infrastructure instabilities and the lack of availability or comprehensive contractual agreements could lead to challenges in meeting service level agreement (SLA) commitments; we might lack sufficient "future skills" for delivering and operating hybrid environments; we might lack the automation, standardization, and tools to manage and optimize operations and infrastructure; local legal requirements or changes to data sovereignty may lead to customers relocating their landscapes to a different data center; the loss of the right to use hardware purchased or leased from third parties could affect our ability to provide our cloud applications; disruptions to SAP's cloud applications portfolio (such as system outages or downtimes, SAP network failure due to human or other errors, security breaches, or variability in user traffic for cloud applications) could affect customer SLAs; hardware failures or system errors might result in data loss or corruption; exploitation by threat actors of known and previously unknown ("zero day") security vulnerabilities in our or our customers' systems and software, including as a result of our or our customers' failure to patch such vulnerabilities in a timely or effective manner; partner co-location of data centers might not adhere to our quality standards; or we might not comply with applicable certification requirements, such as the Payment Card Industry Data Security Standard (PCI DSS).
Technology1 | 7.7%
Technology - Risk 1
Technology and Products: Our technology and products may experience undetected defects, coding or configuration errors, may not integrate as expected, or may not meet customer expectations.
We are subject to risks and associated consequences in the following areas, among others: failure of software products and services to fully meet market needs or customer expectations; failure of software products and services from acquired companies to fully comply with SAP quality standards; failure of new products, services, and cloud offerings, including third-party technologies, to comply with local standards and requirements; the possibility that new products, services, and cloud offerings or subsequent versions and updates to existing products, services, and cloud offerings might contain defects or security vulnerabilities, or might not be mature enough from the customer's point of view for business-critical solutions, or might not be sufficiently secure after release or shipment despite all the due diligence SAP puts into quality; inability of algorithms to correctly adapt to evolving circumstances, which may lead to adverse decision-making processes in the context of AI-related technologies; and the inability to fulfil expectations of customers regarding time and quality in the defect resolution process.
Ability to Sell
Total Risks: 3/13 (23%)Above Sector Average
Competition2 | 15.4%
Competition - Risk 1
Market Share and Profit: Our market share and profit could decline due to increased competition, market consolidation, technological innovation, and new business models in the software industry.
The market for cloud computing is increasingly competitive and is exhibiting strong growth relative to the market for on-premise solutions. To maintain or improve our operating results in the cloud business, it is important that we not only attract new customers but also that our existing customers renew their agreements with us when the initial contract term expires and purchase additional modules or additional capacity. Additionally, we need to bring innovations to the market in line with the demands of our ecosystem and ahead of our competitors, such as solutions to support new data-driven applications and the extension of our suite of intelligent technologies based on SAP Business Technology Platform (SAP BTP). We are subject to risks and associated consequences in the following areas, among others: inability to deliver fully suitable solution and transformation services to our customers on the cloud transformation journey, both in cloud-only and hybrid scenarios; inability to successfully execute on our hyperscaler strategy; adverse, near-term revenue effects due to increasing cloud business and conversions from on-premise licenses to cloud subscriptions from existing SAP customers, which could have an adverse effect on related maintenance and services revenue; insufficient solution and service adoption together with increased complexity, as well as failures during the execution of our corporate strategy in the context of our portfolio for solutions and services, which could lead to a loss of SAP's position as a leading cloud company and subsequently to reduced customer adoption; customers and partners being reluctant or unwilling to migrate and adapt to the cloud; customers considering cloud offerings from our competitors; strategic alliances among competitors; price pressure, cost increases, and loss of market share through traditional, new, and cooperating competitors and hyperscalers; and the inability to achieve the planned margin increase in time as planned.
Competition - Risk 2
Innovation: We might not be able to compete effectively if we strategize our solution portfolio ineffectively or if we are unable to keep up with rapid technological and product innovations, enhancements, new business models, and changing market expectations.
Our future success depends on our ability to keep pace with technological and process innovations and new business models, as well as on our ability to develop new products and services, enhance and expand our existing products and services portfolio, and integrate products and services we obtain through acquisitions. To be successful, we are required to adapt our products and our go-to-market approach to a cloud-based delivery and consumption model so as to satisfy increasing customer demand and to ensure an appropriate level of adoption, customer satisfaction, and retention. We are subject to risks and associated consequences in the following areas, among others: inability to develop and sell new cloud products spanning various organizations on time and in line with market demands due to complexity in heterogeneous technical environments; inability to anticipate and develop technological improvements or succeed in adapting SAP products, services, processes, and business models to technological change, changing regulatory requirements, or emerging industry standards; a change in requirements of our customers and partners to strengthen the Intelligent Enterprise strategy; the possibility that our product and technology strategy might not be successful, or that our customers and partners might not adopt our technology platforms, applications, or cloud services quickly enough, or that they might consider other competing solutions in the market, or that our strategy might not match customers' expectations and needs, specifically in the context of expanding the product portfolio into additional markets. We are integrating AI into a number of our products, including our suite of enterprise applications and SAP BTP, and we expect our use of AI across our portfolio to continue to grow. As with many innovations, AI presents risks and challenges that could affect its adoption and therefore our business. AI algorithms or training methodologies may be flawed. Data sets may be overbroad, insufficient, or contain biased information. Content generated by AI systems may be offensive, illegal, or otherwise harmful. Ineffective or inadequate AI development or deployment practices by SAP or our partners could result in incidents that impair the acceptance of AI solutions or cause harm to individuals, customers, or society, or result in our products and services not working as intended. Human review of certain outputs may be required, which could introduce error or inefficiencies to the intended use of our AI-enabled offerings. As a result of these and other challenges associated with innovative technologies, our implementation of AI systems could subject us to competitive harm, regulatory action, legal liability, and brand or reputational harm. In particular, there is significant uncertainty surrounding the applications of intellectual property and privacy laws to AI technology. Intellectual property ownership and license rights, including copyright, surrounding AI technology have not been fully addressed by courts or other laws or regulations of the jurisdictions in which we operate, and our use of AI technology or integration of AI technology into our products and services may result in disputes with respect to ownership or intellectual property, or exposure to claims of copyright or other intellectual property misappropriation. In addition, our AI technology may involve the processing of personal and other sensitive data and may be subject to laws, policies, legal obligations, and contractual requirements related to privacy, data protection, and information security. Various privacy laws extend rights to consumers (such as the right to obtain consent or delete certain personal data) and regulate automated decision making. An alleged or actual failure to meet these obligations may lead to regulatory investigations and fines or penalties; may require us to change our business practices or retrain our algorithms; or may prevent or limit our use of AI technology. It is also possible that we are held liable for intellectual property, privacy, or other legal violations of third-party AI technology that we use, and that we may not have full recourse for any damages that we suffer (for example, our use of third-party AI technology may be subject to limitations of liability or provide no liability coverage). In addition, some AI scenarios present ethical issues or may have broad impacts on society, and there can be no assurance that our Global AI Ethics Policy or similar policies and procedures will be sufficient to address such issues. If we enable or offer AI solutions that have unintended consequences, unintended usage or customization by our customers and partners, or are controversial because of their impact on human rights, privacy, employment, or other social, economic, or political issues, we may experience reputational harm, adversely affecting our business and consolidated financial statements.
Sales & Marketing1 | 7.7%
Sales & Marketing - Risk 1
Sales and Services: Sales and implementation of SAP software and services, including cloud, are subject to several significant risks sometimes beyond our direct control.
A core element of our business is the successful implementation of software and service solutions. The implementation of SAP software and cloud-based service deliveries is led by SAP, by partners, by customers, or by a combination thereof. We are subject to risks and associated consequences in the following areas, among others: implementation risks caused by insufficient or incorrect information provided by customers, insufficient customer expectation management, including scope, integration capabilities and aspects, and a lack of purposeful selection, implementation, or utilization of SAP solutions; a lack of customer commitments and respective engagements; challenges to achieve a seamlessly integrated, sufficiently automated and aligned service delivery; unrenderable services committed during the sales stage; inadequate contracting and consumption models based on subscription models for services, support, and application management; deviations from standard terms and conditions; or statements concerning solution developments that might be misperceived by customers as commitments on future software functionalities. Any of these events could have an adverse effect on our reputation, business, competitive or financial position, profit, and cash flows.
Finance & Corporate
Total Risks: 2/13 (15%)Below Sector Average
Corporate Activity and Growth2 | 15.4%
Corporate Activity and Growth - Risk 1
Partner Ecosystem: If we are unable to scale, maintain, and enhance an effective partner ecosystem, revenue might not increase as expected.
An open and vibrant partner ecosystem is a fundamental pillar of our success and growth strategy. We have entered into partnership agreements that drive co-innovation on our platforms, profitably expand our routes to market to optimize market coverage, optimize cloud delivery, and provide high-quality services capacity in all market segments. Partners play a key role in driving market adoption of our entire solutions portfolio, by co-innovating on our platforms, embedding our technology, and reselling or implementing our software. We are subject to risks and associated consequences in the following areas, among others: failure to establish and enable a network of qualified and fully committed partners; failure of partners to develop sufficient innovative solutions and content on our platforms or to provide high-quality products or services to meet customer expectations; failure of partners to embed our solutions sufficiently enough to profitably drive product adoption; failure of partners to adhere to applicable legal and compliance regulations; failure of partners to transform their business model in accordance with the transformation of SAP's business model in a timely manner; and failure of partners to comply with contract terms in embargoed or high-risk countries. If any of these risks materialize, this might have an adverse effect on the demand for our products and services as well as the partner's loyalty and ability to deliver. As a result, we might not be able to scale our business to compete successfully with other vendors, which could have an adverse effect on our reputation, business, competitive or financial position, profit, and cash flows.
Corporate Activity and Growth - Risk 2
Mergers and Acquisitions: We might not acquire, integrate, or divest companies or their components effectively or successfully.
To expand and consolidate our business, we acquire and divest businesses, products, and technologies, and we expect to continue doing so in the future. Over time, some of these acquisitions have increased in size and in strategic importance for SAP. Management negotiation of potential acquisitions and divestures and the integration and carve-out of acquired businesses, products, or technologies demands time, focus, and resources of both management and the workforce, and exposes us to unpredictable operational difficulties. We are subject to risks and associated consequences in the following areas, among others: incorrect information or assumptions during the due diligence process for acquisitions, divestitures, and other transactions; failure to integrate acquired technologies or solutions successfully and profitably into SAP's solution portfolio and strategy; failure to successfully integrate acquired entities and their operations; failure to fulfill the needs of the acquired company's customers or partners; failure to implement, restore, or maintain internal controls, disclosure controls, and procedures and policies within acquired companies; debt incurrence or significant unexpected cash expenditures; impairment of goodwill and other intangible assets acquired in business combinations; and failure of acquired companies to comply with regulatory requirements.. We have in the past, and may in the future, choose to divest certain entities, businesses, or product lines. We may have difficulty obtaining terms acceptable to us. Additionally, we may experience difficulty carving out portions of or entire businesses, we may incur a loss of revenue or experience a negative impact on margins, or we may not achieve the desired strategic and financial benefits. Such potential transactions may also delay achievement of our strategic objectives, cause us to incur additional expenses, disrupt customer, partner, and employee relationships, and may expose us to unanticipated or ongoing obligations and liabilities, including as a result of indemnification obligations. Further, during the pendency of a divestiture, we may be subject to risks such as a decline in the business to be divested, a loss of employees, customers, or suppliers, and the risk that the transaction may not close, any of which could have a material adverse effect on the business to be divested as well as our retained business. If a divestiture is not completed for any reason, we may not be able to find another buyer on the same terms, and we may have incurred significant costs without the corresponding benefit.
Legal & Regulatory
Total Risks: 2/13 (15%)Below Sector Average
Regulation1 | 7.7%
Regulation - Risk 1
International Laws and Regulations: Laws, regulatory requirements and standards in Germany, the United States, and elsewhere continue to be very stringent. Our international business activities and processes expose us to numerous and often conflicting laws and regulations, policies, standards, or other requirements, and sometimes even conflicting regulatory requirements.
The SAP Group has a global presence and operates in most countries of the world. As a European company domiciled in Germany with securities listed in Germany and the United States, we are subject to European, German, U.S., and other governance-related regulatory requirements of the countries we operate in. Our business is subject to numerous risks inherent to international business operations and associated consequences, such as changes in tax laws, changes in external reporting standards, and the interpretation of the complex tax rules in certain countries, including but not limited to conflict and overlap among tax regimes as well as the introduction of new tax concepts that harm digitalized business models; discriminatory, protectionist, or conflicting fiscal policies and tax laws; import and export regulations and trade sanctions; counter or even conflicting sanctions; embargoes, including but not limited to country-specific software certification requirements; and newly emerging cybersecurity and environmental, social, and governance (ESG) compliance and disclosure laws. As we expand into new countries and markets or extend our business activities in these markets, including emerging and high-risk markets, these risks could intensify. The application of the respective local laws and regulations to our business is sometimes unclear, subject to change over time, and often conflicting among jurisdictions. Additionally, these laws and government approaches to enforcement continue to change and evolve, just as our products and services continually evolve. Compliance with these varying laws and regulations, including antitrust regulations, could involve significant costs or require changes in our products or business practices. Non-compliance could result in the imposition of penalties or cessation of orders due to alleged non-compliant activity. Governmental authorities could use considerable discretion in applying these statutes and any imposition of sanctions against us could be material. Any of these events could have a material adverse effect on our operations globally or in one or more countries or regions, which could have a material adverse effect on our business, financial position, profit, and cash flows.
Environmental / Social1 | 7.7%
Environmental / Social - Risk 1
Data Protection and Privacy: Non-compliance with increasingly complex and stringent, sometimes even conflicting, applicable data protection and privacy laws, or failure to meet the contractual requirements of SAP's customers with respect to our products and services, could lead to civil liabilities and fines, as well as loss of customers.
As a global software and service provider, SAP is required to comply with local laws wherever it does business. One of the relevant European data protection laws is the General Data Protection Regulation. International data transfers to third countries that do not provide for an adequate level of data protection require additional safeguards, including transfer risk assessments, to justify a transfer from the EU to a third country under the new EU standard contractual clauses. Furthermore, evolving data protection and privacy laws, regulations, and other standards around the world (such as the California Consumer Privacy Act, the Chinese Personal Information Protection Law including data localization requirements, the EU Digital Services Act, and the EU's proposed e-Privacy Regulation) are increasingly aimed at protecting individuals' personal information when it comes to marketing and tracking their online activities. This may impose additional burdens for SAP due to increasing compliance standards that could restrict the use and adoption of SAP's products and services (in particular cloud services) and make it more challenging and complex to meet customer expectations. These changing criteria also impact the compliant use of new technology, such as machine learning and Artificial Intelligence for product development and deployment of intelligent applications. Non-compliance with applicable data protection and privacy laws by SAP or any of the subprocessors engaged by SAP within the processing of personal data could lead to risks. These include, among others: mandatory disclosure of breaches to affected individuals, customers, and data protection supervisory authorities; investigations and administrative measures by data protection supervisory authorities, such as the instruction to alter or stop non-compliant data processing activities, including the instruction to stop using non-compliant subprocessors; or the possibility of damage claims by customers and individuals, contract terminations, and potential fines. In addition, the German Federal Office for the Protection of the Constitution and security industry experts continue to warn of risks related to a globally growing number of cybersecurity attacks aimed at obtaining or violating company data including personal data. Any of these events could have a material adverse effect on our reputation, business, financial performance, competitive or financial position, profit, and cash flows.
Production
Total Risks: 1/13 (8%)Below Sector Average
Employment / Personnel1 | 7.7%
Employment / Personnel - Risk 1
Ethical Behavior: Our global business exposes us to risks related to unethical behavior and non-compliance with policies by employees, other individuals, partners, third parties, or entities associated with SAP.
SAP's leadership position in the global market is founded on the long-term and sustainable trust of our stakeholders worldwide. Our overarching approach is one of corporate transparency, open communication with financial markets, regulators, and authorities, and adherence to recognized standards of business integrity. This commitment to recognized standards of business integrity is formalized in SAP's CoEBC and supporting guidelines. We are subject to risks and associated consequences in the following areas, among others: non-compliance with our policies and violation of compliance related rules, regulations, and legal requirements including, but not limited to, antitrust, anticorruption, and antibribery legislation in Germany, the U.S. Foreign Corrupt Practices Act, the UK Bribery Act, and other local laws prohibiting corrupt conduct; unethical and fraudulent behavior leading to criminal charges, fines, and claims by affected parties; collusion with external third parties; fraud and corruption; public sector transactions in territories exposed to a high risk of corruption; or increased exposure and impact on business activities in highly regulated industries. Any of these events could have a material adverse effect on our reputation, business, competitive or financial position, profit, and cash flows. In recent years, the investigation team within SAP's Office of Ethics & Compliance (OEC), together with the assistance of an external law firm, investigated whistleblower complaints alleging that the business conduct of some former SAP employees within subsidiary SAP companies did not comply with SAP's policies and procedures or applicable laws. These investigations culminated in January 2024 in a settlement agreement with the U.S. Securities and Exchange Commission (U.S. SEC) and the U.S. Department of Justice (U.S. DOJ), as well as with local authorities in South Africa. SAP fully cooperated with law enforcement authorities, and took immediate steps to discipline the employees involved, including terminating all those implicated in potential law violations. Since these allegations were made, SAP has also significantly strengthened its compliance program and related internal controls in accordance with DOJ and regulatory expectations and requirements. SAP has encountered situations in the past that required clear messaging and strong action on non-compliance in the context of corrupt behavior that has the potential to harm our business and reputation. SAP is continuing to investigate its dealings with the public sector.
Macro & Political
Total Risks: 1/13 (8%)Below Sector Average
Economy & Political Environment1 | 7.7%
Economy & Political Environment - Risk 1
Changed
Global Economic and Political Environment: Uncertainty in the global economy and/or financial markets, and social and political instability caused by state-based conflicts, terrorist attacks, civil unrest, war, or international hostilities could lead to disruptions in our business.
As a global company, we are influenced by multiple external factors that are difficult to predict, may develop quickly, and are beyond our influence and control. These include, among others: crises affecting credit or liquidity markets; regional or global recessions; sharp fluctuations in commodity prices, currency exchange rates or interest rates; inflation or deflation; sovereign debt and bank debt rating downgrades; restructurings or defaults; adverse geopolitical events (such as Russia's invasion of Ukraine and the Israel - Hamas conflict); rising military tensions around the world (such as the China-Taiwan tensions) and in particular within Europe's borders; global policy including in the United States, the European Union (EU), Russia, and China; and global pandemic diseases such as COVID-19. Any of these events could have an adverse effect on our reputation, business, competitive or financial position, profit, and cash flows.
See a full breakdown of risk according to category and subcategory. The list starts with the category with the most risk. Click on subcategories to read relevant extracts from the most recent report.

FAQ

What are “Risk Factors”?
Risk factors are any situations or occurrences that could make investing in a company risky.
    The Securities and Exchange Commission (SEC) requires that publicly traded companies disclose their most significant risk factors. This is so that potential investors can consider any risks before they make an investment.
      They also offer companies protection, as a company can use risk factors as liability protection. This could happen if a company underperforms and investors take legal action as a result.
        It is worth noting that smaller companies, that is those with a public float of under $75 million on the last business day, do not have to include risk factors in their 10-K and 10-Q forms, although some may choose to do so.
          How do companies disclose their risk factors?
          Publicly traded companies initially disclose their risk factors to the SEC through their S-1 filings as part of the IPO process.
            Additionally, companies must provide a complete list of risk factors in their Annual Reports (Form 10-K) or (Form 20-F) for “foreign private issuers”.
              Quarterly Reports also include a section on risk factors (Form 10-Q) where companies are only required to update any changes since the previous report.
                According to the SEC, risk factors should be reported concisely, logically and in “plain English” so investors can understand them.
                  How can I use TipRanks risk factors in my stock research?
                  Use the Risk Factors tab to get data about the risk factors of any company in which you are considering investing.
                    You can easily see the most significant risks a company is facing. Additionally, you can find out which risk factors a company has added, removed or adjusted since its previous disclosure. You can also see how a company’s risk factors compare to others in its sector.
                      Without reading company reports or participating in conference calls, you would most likely not have access to this sort of information, which is usually not included in press releases or other public announcements.
                        A simplified analysis of risk factors is unique to TipRanks.
                          What are all the risk factor categories?
                          TipRanks has identified 6 major categories of risk factors and a number of subcategories for each. You can see how these categories are broken down in the list below.
                          1. Financial & Corporate
                          • Accounting & Financial Operations - risks related to accounting loss, value of intangible assets, financial statements, value of intangible assets, financial reporting, estimates, guidance, company profitability, dividends, fluctuating results.
                          • Share Price & Shareholder Rights – risks related to things that impact share prices and the rights of shareholders, including analyst ratings, major shareholder activity, trade volatility, liquidity of shares, anti-takeover provisions, international listing, dual listing.
                          • Debt & Financing – risks related to debt, funding, financing and interest rates, financial investments.
                          • Corporate Activity and Growth – risks related to restructuring, M&As, joint ventures, execution of corporate strategy, strategic alliances.
                          2. Legal & Regulatory
                          • Litigation and Legal Liabilities – risks related to litigation/ lawsuits against the company.
                          • Regulation – risks related to compliance, GDPR, and new legislation.
                          • Environmental / Social – risks related to environmental regulation and to data privacy.
                          • Taxation & Government Incentives – risks related to taxation and changes in government incentives.
                          3. Production
                          • Costs – risks related to costs of production including commodity prices, future contracts, inventory.
                          • Supply Chain – risks related to the company’s suppliers.
                          • Manufacturing – risks related to the company’s manufacturing process including product quality and product recalls.
                          • Human Capital – risks related to recruitment, training and retention of key employees, employee relationships & unions labor disputes, pension, and post retirement benefits, medical, health and welfare benefits, employee misconduct, employee litigation.
                          4. Technology & Innovation
                          • Innovation / R&D – risks related to innovation and new product development.
                          • Technology – risks related to the company’s reliance on technology.
                          • Cyber Security – risks related to securing the company’s digital assets and from cyber attacks.
                          • Trade Secrets & Patents – risks related to the company’s ability to protect its intellectual property and to infringement claims against the company as well as piracy and unlicensed copying.
                          5. Ability to Sell
                          • Demand – risks related to the demand of the company’s goods and services including seasonality, reliance on key customers.
                          • Competition – risks related to the company’s competition including substitutes.
                          • Sales & Marketing – risks related to sales, marketing, and distribution channels, pricing, and market penetration.
                          • Brand & Reputation – risks related to the company’s brand and reputation.
                          6. Macro & Political
                          • Economy & Political Environment – risks related to changes in economic and political conditions.
                          • Natural and Human Disruptions – risks related to catastrophes, floods, storms, terror, earthquakes, coronavirus pandemic/COVID-19.
                          • International Operations – risks related to the global nature of the company.
                          • Capital Markets – risks related to exchange rates and trade, cryptocurrency.
                          What am I Missing?
                          Make informed decisions based on Top Analysts' activity
                          Know what industry insiders are buying
                          Get actionable alerts from top Wall Street Analysts
                          Find out before anyone else which stock is going to shoot up
                          Get powerful stock screeners & detailed portfolio analysis