Skip to content

How to avoid scope creep in an SAP implementation

Scope creep is the most common reason SAP projects overrun. The fix is documented exclusions, change control that forces trade-offs, and a scope freeze with executive backing.

A scope box on a project board overflowing with extra sticky notes
Contents
  1. What scope creep looks like
  2. Warning signs
  3. Why SAP is especially vulnerable
  4. Everything is connected
  5. The once-in-a-decade pressure
  6. What clean core changes
  7. Seven strategies that work
  8. What a change costs by phase
  9. Contract clauses and change control governance
  10. Contract clauses that matter
  11. Change control board
  12. When scope changes are legitimate
  13. What works in practice
  14. Frequently asked questions

You avoid scope creep in an SAP implementation by making every change visible and expensive to approve. Write down what is out of scope as carefully as what is in. Route every request through change control with an impact assessment on time, cost and quality. Require a trade-off for every addition. Set a scope freeze date with executive backing, and put the same discipline into the SI contract. This guide is for programme directors, sponsors and PMOs on S/4HANA programmes. Use the cost-of-change table and the contract clauses below in your next steering pack.

Most SAP projects run over budget and past their deadlines, and scope creep is the most common reason. I have worked with dozens of enterprises whose SAP projects spiralled out of control, and three signals appear before the overrun reaches the steering report. Small changes pile up without impact assessment. Change control runs on personal relationships instead of documented authority. And the sponsor approves things over coffee that the project team hears about a week later.

One pharmaceutical client started with a clear 18-month timeline. Three years later it was still implementing, and costs had doubled. The CIO of a manufacturing company told me his team had scrapped entire modules it had spent months configuring, because requirements kept changing. Scope had grown so far nobody recognised the original plan.

These are not edge cases. They are the most common way SAP programmes fail.

It starts innocently. A business lead asks for "just one small change". Then another. The phrase "while we are in there, just..." has derailed more SAP implementations than any technical challenge.

I worked with a retail client where we started clean: core Finance and basic Materials Management. Six months in, the CMO wanted customer analytics. Then the COO needed advanced warehouse functions. The original nine-month timeline was under threat. I pushed back and rejected both requests. That discipline is the job.

Not every change is scope creep. Sometimes you find critical gaps in design that nobody anticipated. Sometimes regulations change mid-project. Those are legitimate, and they follow a process with timeline and budget adjustments. Scope creep just appears, usually after a conversation in a corridor.

One manufacturing client started with 10 custom reports and ended with 47, each adding design, build and test time. The reporting workstream alone ran 200% over budget.

200%

reporting workstream budget overrun after scope drift took custom reports from 10 to 47

Source: Manufacturing client programme

Project leadership reviewing scope changes against the original baseline during a steering committee review

Warning signs

These are the signs I watch for, and the response to each:

Warning signUnderlying causeResponse
"Just one more thing" becomes daily languageUnclear scope boundariesRe-baseline with business leads; enforce formal change control
Business leads adding features informallyNo understanding of downstream impactRoute every request through impact assessment; show the cost
Timeline extending without a formal replanSilent scope expansionHold scope checkpoints; replan with change board sign-off
Documentation no longer matches what is builtInformal scope handling, no version controlUpdate specifications and plans with every approved change
Budget burn outpacing progressHidden effort from undocumented changesTrack effort against work packages; investigate variances
Team working nights and weekends to catch upScope exceeds capacityEscalate to the change board; force a scope decision
Blame between business, IT and partnerScope has already crept past controlFreeze scope, run a root cause review, reset the baseline

Everything is connected

SAP ties everything together. Finance affects supply chain. HR touches payroll. Sales connects to inventory. One change can break ten things.

One client added a single field to its purchase order process. It looked trivial. It broke three interfaces and required report rewrites across departments. Another client asked for a "tiny change" to its pricing procedure, which turned out to need the whole pricing structure reconfigured: three weeks of work and $40,000 in consulting fees, for a tiny change.

The once-in-a-decade pressure

Most companies implement SAP once every 10 to 15 years. Every department knows it will not get another chance for a decade. Nobody wants to hear "phase 2", which in most organisations means never. So everything gets pushed into the current project, and the scope list becomes a wish list.

What clean core changes

Clean core puts a technical brake on customisation. On S/4HANA Cloud Public Edition, modifying the core is not possible: extensions go through released APIs, on-stack or side-by-side on SAP BTP. On Private Edition and on-premise, modification is still possible, but SAP's guidance treats it as a last resort because each one adds upgrade work.

The useful side effect is scope discipline. A request to "just add this approval step to standard order-to-cash" stops being a casual configuration chat and becomes an extension with its own design, build and test cost. Put an extension review forum below the steering committee, with one architect who can approve or reject, and many of these requests stop before they enter the baseline. On-premise programmes without that forum fall back into the old patterns. My clean core guide explains how to set one up.

  1. Define scope with explicit exclusions. Document what is out of scope as carefully as what is in, and get sign-off on both. Ambiguity is where the arguments start.
  2. Run formal change control with consequences. Every change needs an impact assessment on cost, time and quality, visible to whoever approves it.
  3. Communicate scope boundaries every steering meeting. Show scope status with a simple red, amber, green view. Much drift is misunderstanding.
  4. Write a scope management plan. Set out how changes are assessed, approved, escalated and tracked, so every workstream handles them the same way. My SAP project scope template gives a starting structure.
  5. Prioritise with MoSCoW. Must have, Should have, Could have, Won't have this time. Push hard to keep Must Have short.
  6. Version-control every decision. Every approved change updates the baseline. Every rejected change is logged with the reason.
  7. Require trade-offs. If a new requirement comes in, something else comes out. Must-haves become optional quickly when they cost something.

Three techniques I have used make these stick.

Sign-off discipline. Make business leads sign approved requirements. On one programme, a business lead swore he had never approved a particular process flow. We produced the document with his signature, and the argument ended. The signature is not bureaucracy. It stops the same argument restarting six months later.

Show the ripple effects. I built a demonstration for a client showing how changing one field on a sales order would affect 14 areas, from reporting to interfaces to security roles. Behaviour changed. Education costs hours. Not understanding ripple effects costs months.

Show the cost of change. A change during design might cost $5,000. The same change during testing might cost $50,000. Put a simple chart of that in front of people and casual requests slow down.

These are indicative cost-of-change ranges for S/4HANA programmes in the US market. They vary with complexity and partner. Use them as anchors, not quotes.

PhaseTypical cost of a small changeTypical cost of a medium change
Explore (design)$2K to $10K$10K to $30K
Early Realize$5K to $20K$20K to $80K
Mid-Realize (build)$15K to $50K$50K to $200K
Late Realize (test)$30K to $100K$100K to $400K
Deploy and cutover$80K to $300K$300K to $1M+
Hypercare (after go-live)$150K to $500K$500K to $2M+

The pattern matches what research has found for decades. A NASA study of error cost escalation found that a requirements error caught in integration and test cost 21 to 78 times as much to fix as one caught during requirements, and far more once the system was in operation. Scope governance exists to keep changes on the cheap side of that curve.

The phrase 'while we are in there, just...' has derailed more SAP implementations than any technical challenge. Each addition seems harmless. Together, they are lethal.

Contract clauses that matter

Vague contracts create expensive problems. I have seen a client sign a contract that said only "implement S/4HANA". The partner later claimed specific processes were add-ons requiring extra fees, and the client ended up paying double. These clauses prevent that:

ClausePurpose
Scope with explicit exclusionsLimits what the fixed price covers and removes ambiguity about add-ons
Pre-agreed rates for common changesLocks prices for reports, interfaces and configuration changes before pressure arrives
Consultant continuityStops new consultants reopening settled decisions and widening scope
Approval authority on both sidesStops junior consultants promising features nobody authorised
Milestone-based billingTies payment to signed-off deliverables, not elapsed time
Acceptance criteria per deliverableDefines "done" before anyone argues about it
Clean-core extension clauseRequires extensions to use released APIs or SAP BTP; saves rework at the first major upgrade

My notes on ERP contract negotiation cover how to get these clauses agreed.

Change control board

A change board works when it has the right people. I build mine with three roles: a business decision-maker who cares about function, a project manager who cares about timeline and a finance lead who cares about budget. That balance stops any one priority dominating.

The path every scope change takesNothing enters the baseline without an impact assessment and a trade-off. Hallway agreements stop here.
  1. Request raisedIn writing, not over coffee
  2. Impact assessmentTime, cost and quality, before anyone approves
  3. Trade-off namedSomething else comes out to make room
  4. Change board decidesBusiness, project and finance at the table
  5. Baseline updatedRejected changes logged with the reason

Scope moves only through the board

The board needs real authority. On one programme, no scope change happened without its approval. Not one. Hallway agreements stopped. When the sales VP tried to slip in new requirements, the team had a documented approval matrix to point to.

Most decisions should stay at board level. Only real disputes go to the sponsor, which keeps the sponsor engaged without drowning them. Hold a scope review with workstream leads every two weeks and report requests submitted, approved and rejected. When people see "15% scope growth this month" in a status report, behaviour changes.

Some changes are necessary. A pharmaceutical client of mine was hit with new FDA regulations mid-implementation. They had to go in. That is not scope creep. That is reality.

When a legitimate change arrives, ask two questions. What is the smallest fix that will work? And, to the person asking: what are you willing to remove to make room? Urgency drops fast when a request costs something.

The options are to extend the timeline, add budget, cut other requirements, add people, or a mix. Whatever you choose, document it and update every baseline document at once. Outdated documents create the next round of scope problems.

AI now helps with the paperwork. Assistants such as Microsoft Copilot summarise long change request threads into a decision-ready brief for the board, and SAP Cloud ALM keeps requirements, changes and tests linked so the impact of a change is easier to trace. AI can show that a change touches 14 areas. It cannot tell the COO that her request means the CFO's request will not happen. That conversation is still yours.

A manufacturing company I worked with finished its SAP project on time, which is rarer than it should be. It set a scope freeze date early, and any change after it needed the CEO's personal approval. The project closed with budget remaining, and nobody was working weekends at go-live.

Another client used a token system: each department received three change tokens for the whole project. Want a change? Spend a token. People thought hard about what mattered, and "must-haves" were reconsidered once they cost finite currency.

Neither approach is complicated. Both need discipline and leadership support. The test of any scope process is the day the COO walks into the project room with "just one small change". Build it for that day.

What is scope creep in an SAP project?

The gradual, uncontrolled growth of requirements without matching changes to timeline, budget or resources. In SAP it usually starts with small additions: extra reports, extra fields, "just one quick workflow change". Each looks harmless. Together they add months.

Legitimate scope changes follow a process and come with timeline and budget adjustments. Scope creep arrives informally and bypasses change control.

What are the most common causes of scope creep on SAP projects?

Three come up consistently: vague initial requirements, so anything can be argued as in scope; no formal change control, so changes slip in at every level; and the once-in-a-decade mindset, where every department tries to fix years of problems in this project.

SAP's interconnection amplifies all three. One change can break ten connected processes, and if business leads cannot see those connections, the impact appears in testing, when it costs many times more.

How does clean core change scope creep risk?

It adds a technical brake. On S/4HANA Cloud Public Edition the core cannot be modified, so every gap becomes an extension with its own design, build and test cost. On Private Edition and on-premise, modification is possible but adds upgrade work, so SAP's guidance discourages it.

An extension review forum, with one architect who has authority to decide, stops many requests before they enter the baseline. Without that forum, on-premise programmes drift back into old habits.

What is the difference between scope creep and gold-plating?

Scope creep comes from the business: requests beyond what was agreed. Gold-plating comes from the delivery team: complexity nobody asked for.

In SAP terms, gold-plating is a consultant building elaborate workflow logic where simple routing would do. Scope creep is the COO asking for advanced warehouse functions six months into a project scoped for basic MM. Both inflate cost and time, and both need the same discipline.

How do you structure a change control process that actually works?

Three elements. Every request carries an impact assessment on timeline, budget and resources. The approval board includes someone who cares about each of those three, not just business leads, who will approve everything. And every addition requires a trade-off: something else comes out.

That last rule alone filters out requests that are not truly critical.

Can you avoid scope creep entirely?

No. On any programme longer than a few months, business conditions shift, regulations change and design uncovers gaps.

The goal is control, not elimination. Controlled change follows a documented process, is assessed for impact and updates the baseline. Uncontrolled change bypasses the process and surfaces in testing or after go-live as cost nobody planned.

What is the best way to handle scope freeze on a long SAP programme?

Give it a consequence and visible executive backing. The most effective version I have used: the freeze date is in the project charter from day one, the change process defines what "freeze" means in practice, and the sponsor reinforces it publicly at steering before the date arrives.

When the CEO has to approve every change after the freeze personally, the list stays very short.

Noel D'Costa

Written by

Noel D'Costa

25 years across SAP and Oracle ERP programmes in aviation, government, finance, retail, and manufacturing. Finance background. I help leadership teams scope transformations honestly, recover programmes in trouble, and build systems that survive their first year in production.

Next step

Running an ERP programme right now?

If this article touched on a programme you are live in right now, a 30-minute conversation usually gets further than another week of internal analysis.