Common use of Measures Clause in Contracts

Measures. SAP has implemented a multi-layered defense strategy as a protection against unauthorized modifications. • In particular, SAP uses the following to implement the control and measure sections described above: • Firewalls; • Security Monitoring Center; • Antivirus software; • Backup and recovery; • External and internal penetration testing; • Regular external audits to prove security measures. The following table sets out the relevant Articles of GDPR and corresponding terms of the DPA for illustration purposes only.

Measures. SAP has implemented a multi-layered defense strategy as a protection against unauthorized modifications. • In particular, SAP uses the following to implement the control and measure sections described above: • Firewalls; • Security Monitoring Center; • Antivirus software; • Backup and recovery; • External and internal penetration testing; • Regular external audits to prove security measures. The following table sets out the relevant Articles of GDPR and corresponding terms of the DPA for illustration purposes only.(applies to TOMs Set 2 Services defined above)

Measures. SAP has implemented a multi-layered defense strategy as a protection against unauthorized modifications. • In particular, SAP uses the following to implement the control and measure sections described above: • Firewalls; • Security Monitoring Center; • Antivirus software; • Backup and recovery; • External and internal penetration testing; • Regular external audits to prove security measures. The following table sets out the relevant Articles of GDPR and corresponding terms of the DPA for illustration purposes only.

Measures. SAP has implemented a multi-layered defense strategy as a protection against unauthorized modifications. • In particular, SAP uses the following to implement the control and measure sections described above. In particular: • Firewalls; • Security Monitoring Center; • Antivirus software; • Backup and recovery; • External and internal penetration testing; • Regular external audits to prove security measures. The following table sets out the relevant Articles of GDPR and corresponding terms of the DPA for illustration purposes only.