This research is the second in a series of studies with the purpose to understand how companies are managing the new category of security for business-critical applications such as SAP and Oracle, the systems that run the world’s largest businesses.