Organizations that manage SAP security effectively have separated operations and security clearly. And AMS is often not equipped to handle this.