SECURE CLOUD PLATFORM GOVERNANCE FOR SAUDI ENTERPRISES UNDER VISION 2030: INTEGRATING SAP BTP ADMINISTRATION, IDENTITY AUTHENTICATION, ACCESS CONTROL, AND CLOUD CYBERSECURITY COMPLIANCE

Saudi enterprises increasingly rely on cloud platforms to connect applications, orchestrate services and support national digital transformation. Yet platform adoption creates a governance problem that cannot be solved by authentication technology or contractual assurances alone.This review examines how SAP Business Technology Platform (BTP) administration, federated identity, authorisation and cybersecurity compliance can operate as one accountable control system under Saudi Vision 2030. A structured integrative synthesis of research and technical standards published between 2020 and 2025 was combined with contextual examination of Saudi regulatory instruments and SAP administration guidance. The analysis distinguishes vendor capabilities from enterprise responsibilities, maps identity and entitlement decisions to accountable control owners, and identifies evidence required for continuous assurance. It develops a layered operating framework in which account hierarchy, identity lifecycle, least privilege, integration boundaries, workload protection and regulatory traceability are linked through policy decisions and auditable records. The central finding is conceptual: secure platform operation depends less on accumulating isolated controls than on maintaining consistency between business authority, technical configuration and compliance evidence.