Cloud Security Alliance Releases State of ERP Security in the Cloud Report

The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment, today released The State of ERP (Enterprise Resource Planning) Security in the Cloud.

The report is the first in a series planned over the coming year from the CSA ERP Security Working Group and aims to provide IT and management professionals with a sound overview of cloud security for ERP systems while simultaneously examining the privacy challenges involved.

“Modern organizations have long relied on legacy and on-premises systems to manage a host of automated services and data, from inventory and order management to human resources and customer relationship management. However, as the technology driving these systems is increasingly becoming obsolete, enterprises are realizing they must shift these business tools to the cloud if they are to remain agile and competitive,” said Charlie Singh, co-chair of the CSA ERP Security Working Group and SAP security and GRC leader at IBM. “Unfortunately, many IT managers are still unfamiliar with the intricacies of securing such systems in the cloud, and that’s where our latest research comes in.”

The State of ERP Security in the Cloud report, sponsored by Onapsis, examines topics such as:

• Common challenges in ERP security
• General security concerns in cloud-based ERP applications, including data residency, user activity and access monitoring, and incident response
• Security around SaaS ERP applications and IaaS ERP deployments

“We are hearing from many of our customers that they are actively starting to move their ERP implementations to cloud environments,” commented JP Perez-Etchegoyen, co-chair of the CSA ERP Security Working Group and CTO at Onapsis. “As a lead research pioneer in this emerging space, we are excited to co-launch this white paper with the CSA to begin enabling organizations to understand what their cloud environments will consist of and begin taking measures to secure them.”

The CSA ERP Security Working Group seeks to develop best practices to support organizations that are planning or are in the process of securely migrating or operating their large ERP implementations, as well as all other business-critical applications in the cloud.

“Migrating large ERP systems can take months if not years of planning,” said John Yeoh, Research Director, Americas for the CSA. “These deployments involve significant investment of time and money and are extremely complex. It’s these complexities that make standard security measures difficult to implement. We hope this paper initiates much-needed discussion of how to comply with security and privacy guidelines to protect organizations’ critical infrastructure.”

Looking for more? Download our ERP Buyer’s Guide for free to compare the top 24 ERP software vendors head to head! The guide also includes 4 key capabilities to consider while selecting a new ERP solution and 10 questions to ask yourself and the software vendor before purchasing.

And don’t forget to follow us on Twitter, Facebook and LinkedIn for all the latest in the ERP space!