{"id":1128,"date":"2018-02-20T16:35:54","date_gmt":"2018-02-20T16:35:54","guid":{"rendered":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/?p=1128"},"modified":"2019-06-26T18:58:20","modified_gmt":"2019-06-26T18:58:20","slug":"juan-pablo-perez-etchegoyen-the-state-of-cloud-erp-security","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/juan-pablo-perez-etchegoyen-the-state-of-cloud-erp-security\/","title":{"rendered":"Juan Pablo Perez-Etchegoyen: The State of Cloud ERP Security"},"content":{"rendered":"

\"Juan<\/p>\n

As Enterprise Resource Planning (ERP)<\/a> applications are considered to be business-critical, they are often left exposed by users due to a variety of issues such as: complexity, criticality of the data, strong change management processes and lack of special skill sets required.<\/p>\n
Widget not in any sidebars
\n

Onapsis<\/a>, a leading pioneer in cybersecurity and compliance solutions for cloud and on-premise platforms, focuses on the security of big ERP applications<\/a> – mainly SAP and Oracle. As the company has previously focused on the on-prem world, the company has noticed organizations moving to cloud environments, leveraging the latest and greatest innovations, deploying in the cloud itself or in SaaS (Software-as-a-Service), IaaS (Infrastructure-as-a-Service) and PaaS (Platform-as-a-Service) models. This is often in the context of digital transformation<\/a> projects, leveraging the latest technology from ERP vendors such as in memory, analytics and real-time reporting to make their businesses more competitive.<\/p>\n

Juan Pablo Perez-Etchegoyen leads the Research & Development team that keeps Onapsis on the cutting-edge of the business-critical application security market.\u00a0Responsible for the design, research and development of Onapsis’ innovative software solutions, he helps manage the development of new products as well as the SAP cyber-security research that has garnered critical acclaim for the Onapsis Research Labs.<\/p>\n

As a top influencer and global speaker at industry conferences including, Blackhat, HackInTheBox and SAP TechEd\/DCode, we’ve interviewed Perez-Etchegoyen about the state of Cloud ERP security<\/a>.<\/p>\n

Why is security one of the biggest concerns preventing the adoption of cloud-based ERP applications and digital transformation projects in masse?
\n<\/em><\/h3>\n

(Market-size projections calculated at between $23-30 billion over the next five years).<\/p>\n

JP:<\/strong> When running in the cloud, security really changes. In particular, depending on the cloud model, there is a shift of responsibilities, e.g. what you do and the cloud vendor does, not only in terms of managing the systems but also in terms of security like patching, monitoring, protecting, etc. The vendor will address only what is outlined on the contract and what is negotiated beforehand – so focusing on contracts and knowing where the boundaries are is key to a successful migration to the cloud. Otherwise you might think the vendor is doing something while, in fact, he\/she is not, and that is where the gaps are.<\/p>\n

What are the biggest challenges when it comes to adopting cloud-based ERP?<\/em><\/h3>\n

JP:\u00a0<\/strong>A lot of these challenges are similar to the on-prem world. As organizations start to migrate and move their core to the cloud, they need to support the mapping of their business processes into the ERP apps. While some are using SaaS models, many will be moving to IaaS models, where the hosting is handled by Azure, AWS, Google, as well as SAP and Oracle as cloud vendors.<\/p>\n

JP:\u00a0<\/strong>This means customers will be running on a different data center, and they will have to be 100% sure who will deal with the following security requirements: patching, provisioning & authorizations (ERP applications are probably the most complex apps in the world for authorizations), and visibility into what is happening on app and servers and systems, to name a few.<\/p>\n

How will the cloud increase the attack surface for ERP applications?<\/em><\/h3>\n

JP:\u00a0<\/strong>The most critical applications in the organization are now running out of the boundaries of the company, without the traditional controls and processes to secure the applications and data. For example the traditional solutions for packet capture and security protections will potentially not even be available to run in that cloud network therefore organizations need to implement additional controls to understand what is happening on their most critical assets.<\/p>\n

\n

Looking for more? Download our\u00a0ERP Buyer\u2019s Guide<\/a>\u00a0for free to compare the top 24 ERP software vendors head to head! The guide also includes 4 key capabilities to consider while selecting a new ERP solution and 10 questions to ask yourself and the software vendor before purchasing.<\/p>\n

And don’t forget to follow us on\u00a0Twitter<\/a>,\u00a0Facebook\u00a0<\/a>and\u00a0LinkedIn<\/a>\u00a0for all the latest in the ERP space!<\/em><\/p>\n

\t\t\t

\"Download<\/a> \"Download<\/a> \"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n","protected":false},"excerpt":{"rendered":"

As Enterprise Resource Planning (ERP) applications are considered to be business-critical, they are often left exposed by users due to a variety of issues such as: complexity, criticality of the data, strong change management processes and lack of special skill sets required. Onapsis, a leading pioneer in cybersecurity and compliance solutions for cloud and on-premise […]<\/p>\n","protected":false},"author":34,"featured_media":1129,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[334,11],"acf":[],"yoast_head":"\nJuan Pablo Perez-Etchegoyen: The State of Cloud ERP Security<\/title>\n<meta name=\"description\" content=\"As ERP applications are considered to be business-critical, they are often left exposed by users due to a variety of issues.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/juan-pablo-perez-etchegoyen-the-state-of-cloud-erp-security\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Juan Pablo Perez-Etchegoyen: The State of Cloud ERP Security\" \/>\n<meta property=\"og:description\" content=\"As ERP applications are considered to be business-critical, they are often left exposed by users due to a variety of issues.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/juan-pablo-perez-etchegoyen-the-state-of-cloud-erp-security\/\" \/>\n<meta property=\"og:site_name\" content=\"Solutions Review | ERP\" \/>\n<meta property=\"article:published_time\" content=\"2018-02-20T16:35:54+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-06-26T18:58:20+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2018\/02\/Juan-Pablo-Perez-Etchegoyen-The-State-of-Cloud-ERP-Security.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Elizabeth Quirk\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Worktech_Review\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Elizabeth Quirk\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/juan-pablo-perez-etchegoyen-the-state-of-cloud-erp-security\/\",\"url\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/juan-pablo-perez-etchegoyen-the-state-of-cloud-erp-security\/\",\"name\":\"Juan Pablo Perez-Etchegoyen: The State of Cloud ERP Security\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/juan-pablo-perez-etchegoyen-the-state-of-cloud-erp-security\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/juan-pablo-perez-etchegoyen-the-state-of-cloud-erp-security\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2018\/02\/Juan-Pablo-Perez-Etchegoyen-The-State-of-Cloud-ERP-Security.jpg\",\"datePublished\":\"2018-02-20T16:35:54+00:00\",\"dateModified\":\"2019-06-26T18:58:20+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#\/schema\/person\/feeeb7918882f3214ef325bc102b4546\"},\"description\":\"As ERP applications are considered to be business-critical, they are often left exposed by users due to a variety of issues.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/juan-pablo-perez-etchegoyen-the-state-of-cloud-erp-security\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/juan-pablo-perez-etchegoyen-the-state-of-cloud-erp-security\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/juan-pablo-perez-etchegoyen-the-state-of-cloud-erp-security\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2018\/02\/Juan-Pablo-Perez-Etchegoyen-The-State-of-Cloud-ERP-Security.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2018\/02\/Juan-Pablo-Perez-Etchegoyen-The-State-of-Cloud-ERP-Security.jpg\",\"width\":800,\"height\":400,\"caption\":\"Juan Pablo Perez-Etchegoyen: The State of Cloud ERP Security\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/juan-pablo-perez-etchegoyen-the-state-of-cloud-erp-security\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Juan Pablo Perez-Etchegoyen: The State of Cloud ERP Security\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#website\",\"url\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/\",\"name\":\"Solutions Review | ERP\",\"description\":\"Software, Vendors, News and Reviews\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#\/schema\/person\/feeeb7918882f3214ef325bc102b4546\",\"name\":\"Elizabeth Quirk\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/57b5a4f7ddeacb3c21ec36e60492a204?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/57b5a4f7ddeacb3c21ec36e60492a204?s=96&d=mm&r=g\",\"caption\":\"Elizabeth Quirk\"},\"description\":\"Liz is a leading enterprise technology writer covering Enterprise Resource Planning (ERP), Business Process Management (BPM) and Talent Management Suites (TMS) at Solutions Review. She writes to bridge the gap between consumer and technical expert to help readers understand what they're looking for. Liz attended Massachusetts College of Liberal Arts, where she obtained her Bachelor of Arts Degree in English and Communications. You can reach her at equirk@solutionsreview.com\",\"sameAs\":[\"https:\/\/x.com\/Worktech_Review\"],\"url\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/author\/equirk\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Juan Pablo Perez-Etchegoyen: The State of Cloud ERP Security","description":"As ERP applications are considered to be business-critical, they are often left exposed by users due to a variety of issues.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/juan-pablo-perez-etchegoyen-the-state-of-cloud-erp-security\/","og_locale":"en_US","og_type":"article","og_title":"Juan Pablo Perez-Etchegoyen: The State of Cloud ERP Security","og_description":"As ERP applications are considered to be business-critical, they are often left exposed by users due to a variety of issues.","og_url":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/juan-pablo-perez-etchegoyen-the-state-of-cloud-erp-security\/","og_site_name":"Solutions Review | ERP","article_published_time":"2018-02-20T16:35:54+00:00","article_modified_time":"2019-06-26T18:58:20+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2018\/02\/Juan-Pablo-Perez-Etchegoyen-The-State-of-Cloud-ERP-Security.jpg","type":"image\/jpeg"}],"author":"Elizabeth Quirk","twitter_card":"summary_large_image","twitter_creator":"@Worktech_Review","twitter_misc":{"Written by":"Elizabeth Quirk","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/juan-pablo-perez-etchegoyen-the-state-of-cloud-erp-security\/","url":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/juan-pablo-perez-etchegoyen-the-state-of-cloud-erp-security\/","name":"Juan Pablo Perez-Etchegoyen: The State of Cloud ERP Security","isPartOf":{"@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/juan-pablo-perez-etchegoyen-the-state-of-cloud-erp-security\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/juan-pablo-perez-etchegoyen-the-state-of-cloud-erp-security\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2018\/02\/Juan-Pablo-Perez-Etchegoyen-The-State-of-Cloud-ERP-Security.jpg","datePublished":"2018-02-20T16:35:54+00:00","dateModified":"2019-06-26T18:58:20+00:00","author":{"@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#\/schema\/person\/feeeb7918882f3214ef325bc102b4546"},"description":"As ERP applications are considered to be business-critical, they are often left exposed by users due to a variety of issues.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/juan-pablo-perez-etchegoyen-the-state-of-cloud-erp-security\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/enterprise-resource-planning\/juan-pablo-perez-etchegoyen-the-state-of-cloud-erp-security\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/juan-pablo-perez-etchegoyen-the-state-of-cloud-erp-security\/#primaryimage","url":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2018\/02\/Juan-Pablo-Perez-Etchegoyen-The-State-of-Cloud-ERP-Security.jpg","contentUrl":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2018\/02\/Juan-Pablo-Perez-Etchegoyen-The-State-of-Cloud-ERP-Security.jpg","width":800,"height":400,"caption":"Juan Pablo Perez-Etchegoyen: The State of Cloud ERP Security"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/juan-pablo-perez-etchegoyen-the-state-of-cloud-erp-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/"},{"@type":"ListItem","position":2,"name":"Juan Pablo Perez-Etchegoyen: The State of Cloud ERP Security"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#website","url":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/","name":"Solutions Review | ERP","description":"Software, Vendors, News and Reviews","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#\/schema\/person\/feeeb7918882f3214ef325bc102b4546","name":"Elizabeth Quirk","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/57b5a4f7ddeacb3c21ec36e60492a204?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/57b5a4f7ddeacb3c21ec36e60492a204?s=96&d=mm&r=g","caption":"Elizabeth Quirk"},"description":"Liz is a leading enterprise technology writer covering Enterprise Resource Planning (ERP), Business Process Management (BPM) and Talent Management Suites (TMS) at Solutions Review. She writes to bridge the gap between consumer and technical expert to help readers understand what they're looking for. Liz attended Massachusetts College of Liberal Arts, where she obtained her Bachelor of Arts Degree in English and Communications. You can reach her at equirk@solutionsreview.com","sameAs":["https:\/\/x.com\/Worktech_Review"],"url":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/author\/equirk\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/posts\/1128"}],"collection":[{"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/users\/34"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/comments?post=1128"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/posts\/1128\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/media\/1129"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/media?parent=1128"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/categories?post=1128"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/tags?post=1128"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}