- Engineer — Plan: Three critical severity patches in widely deployed SAP products (NetWeaver, Commerce Cloud, AppRouter) warrant scheduling this sprint; no KEV listing or public PoC yet, but NetWeaver has been heavily targeted historically — apply July 2026 SAP Security Patch Day updates and verify no internet-exposed NetWeaver instances are lagging.
- SOC/IR — Skip
- Leader — Learn: Routine SAP patch cycle with critical-severity items; if SAP NetWeaver or Commerce Cloud is in the enterprise stack, confirm with engineering that the July updates are in the patching queue — no breach or active exploitation requiring leadership escalation at this time.