{"id":1131,"date":"2018-02-22T11:30:30","date_gmt":"2018-02-22T11:30:30","guid":{"rendered":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/?p=1131"},"modified":"2022-07-08T16:03:14","modified_gmt":"2022-07-08T16:03:14","slug":"top-7-best-steps-safe-shift-erp-applications-cloud","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/top-7-best-steps-safe-shift-erp-applications-cloud\/","title":{"rendered":"The Top 7 Best Steps for a Safe Shift of ERP Applications to the Cloud"},"content":{"rendered":"

\"The<\/p>\n

Juan Pablo Perez-Etchegoyen leads the Research & Development teams that keeps Onapsis<\/a>,\u00a0a leading pioneer in cybersecurity and compliance solutions for cloud and on-premise applications, on the cutting-edge of the business-critical application security market. Onapsis has special focus on the security of big Enterprise Resource Planning (ERP)<\/a> applications, as they run the biggest companies throughout the world.<\/p>\n
Widget not in any sidebars
\n

Perez-Etchegoyen is responsible for the design, research and development of Onapsis’ innovative software solutions, and helps manage the development of new products as well as the SAP cyber-security research that has garnered critical acclaim for the Onapsis Research Labs. As ERP applications<\/a> are considered to be business-critical, they are often left exposed by users due to a variety of issues.<\/p>\n

The Cloud Security Alliance<\/a>\u00a0(CSA) recently released a report titled, “State of ERP Security in the Cloud<\/a>”\u00a0which is the first in a series planned over the coming year from the CSA ERP Security Working Group and aims to provide IT and management professionals with a sound overview of cloud security for ERP systems while simultaneously examining the privacy challenges involved.<\/p>\n

Below are the top general security concerns in cloud-based ERP applications that the working group have analyzed and come to the consensus on. Perez-Etchegoyen touches upon these seven concerns, describing them as “a guide to the core steps for a safe shift of ERP applications to the cloud,” and should be part of every ERP cloud risk management program.<\/p>\n

1. Data Residency<\/h3>\n

“An ERP application\u2019s most important asset is the data it holds, and this information is often subject to multiple regulations. In particular, in light of the upcoming European General Data Protection Regulations (GDPR)<\/a>, there are restrictions and considerations which need to be addressed in regards to the privacy of personal data, the controls used and where that data resides.”<\/p>\n

2. User Provisioning, Authentication, Authorizations and Single Sign-On<\/h3>\n

“Security considerations must be given as to whether the organization uses its own identity management solutions or a third-party identity provider to deliver SSO to cloud services.”<\/p>\n

3. User Activity and Access Monitoring<\/h3>\n

“The day-to-day functioning of large organizations require employees of various trust levels and roles to have access to ERP solutions and other business-critical applications, as well as the highly sensitive data that resides in them \u2013 and having visibility around what the users are doing at any point in time to detect malicious and anomalous user behavior is important. Different cloud service models will likely require customized solutions and audit trails are required.”<\/p>\n

4. Security Vulnerabilities Management<\/h3>\n

“Organizations may need to agree to specific maintenance periods when patching can be done if a SaaS (Software-as-a-Service)<\/a>\u00a0provider operates their change management. A failure to understand the importance of these steps could lead to a loss of service, corruption of data or system unavailability. In IaaS (Infrastructure-as-a-Service) models, patching can be either outsourced to the cloud service provider or controlled by the organization\u2019s technical team but, ultimately, it is always the customer responsibility.”<\/p>\n

5. Disaster Recovery Planning (DRP)<\/h3>\n

“DRP is considered one of the direct benefits of shifting business applications to the cloud because, whether IaaS or SaaS, the cloud provider can shift to other data centers around the world in case of a major disruption.”<\/p>\n

6. Due Diligence and Service Level Agreements<\/h3>\n

“Many ERP vendors<\/a> provide compliance checklists, but other vendors will not be so forthcoming. As a preventative measure, organizations are encouraged to exercise due diligence and check ERP vendor standards and attestations that have been claimed as valid. Confounding the problem, many SaaS vendors host their products on third-party IaaS infrastructure. Further, if a cloud service is compromised, customer data may also be compromised, leading to regulatory control and possible fines if data is lost.”<\/p>\n

7. Incident Response (IR)<\/h3>\n

“Due to the nature of ERP applications, organizations need to be ready for a compromising incident. While this preparation starts with an IR plan, organizations must also be able to secure the correct data at the appropriate time from the cloud provider when an incident does occur. This should be highlighted in the cloud provider service contract.”<\/p>\n

\n

Looking for more? Download our\u00a0ERP Buyer\u2019s Guide<\/a>\u00a0for free to compare the top 24 ERP software vendors head to head! The guide also includes 4 key capabilities to consider while selecting a new ERP solution and 10 questions to ask yourself and the software vendor before purchasing.<\/p>\n

And don’t forget to follow us on\u00a0Twitter<\/a>,\u00a0Facebook\u00a0<\/a>and\u00a0LinkedIn<\/a>\u00a0for all the latest in the ERP space!<\/em><\/p>\n

\t\t\t

\"Download<\/a> \"Download<\/a> \"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n","protected":false},"excerpt":{"rendered":"

Juan Pablo Perez-Etchegoyen leads the Research & Development teams that keeps Onapsis,\u00a0a leading pioneer in cybersecurity and compliance solutions for cloud and on-premise applications, on the cutting-edge of the business-critical application security market. Onapsis has special focus on the security of big Enterprise Resource Planning (ERP) applications, as they run the biggest companies throughout the […]<\/p>\n","protected":false},"author":34,"featured_media":4810,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[331,11,336],"acf":[],"yoast_head":"\nThe Top 7 Best Steps for a Safe Shift of ERP Applications to the Cloud<\/title>\n<meta name=\"description\" content=\"ERP applications are considered to be business-critical. Here are seven steps to ensure you have a safe transfer to cloud-based ERP applications.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/top-7-best-steps-safe-shift-erp-applications-cloud\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The Top 7 Best Steps for a Safe Shift of ERP Applications to the Cloud\" \/>\n<meta property=\"og:description\" content=\"ERP applications are considered to be business-critical. Here are seven steps to ensure you have a safe transfer to cloud-based ERP applications.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/top-7-best-steps-safe-shift-erp-applications-cloud\/\" \/>\n<meta property=\"og:site_name\" content=\"Solutions Review | ERP\" \/>\n<meta property=\"article:published_time\" content=\"2018-02-22T11:30:30+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-07-08T16:03:14+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2018\/02\/cloud-computer.png\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Elizabeth Quirk\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Worktech_Review\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Elizabeth Quirk\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/top-7-best-steps-safe-shift-erp-applications-cloud\/\",\"url\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/top-7-best-steps-safe-shift-erp-applications-cloud\/\",\"name\":\"The Top 7 Best Steps for a Safe Shift of ERP Applications to the Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/top-7-best-steps-safe-shift-erp-applications-cloud\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/top-7-best-steps-safe-shift-erp-applications-cloud\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2018\/02\/cloud-computer.png\",\"datePublished\":\"2018-02-22T11:30:30+00:00\",\"dateModified\":\"2022-07-08T16:03:14+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#\/schema\/person\/feeeb7918882f3214ef325bc102b4546\"},\"description\":\"ERP applications are considered to be business-critical. Here are seven steps to ensure you have a safe transfer to cloud-based ERP applications.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/top-7-best-steps-safe-shift-erp-applications-cloud\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/top-7-best-steps-safe-shift-erp-applications-cloud\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/top-7-best-steps-safe-shift-erp-applications-cloud\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2018\/02\/cloud-computer.png\",\"contentUrl\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2018\/02\/cloud-computer.png\",\"width\":800,\"height\":400},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/top-7-best-steps-safe-shift-erp-applications-cloud\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The Top 7 Best Steps for a Safe Shift of ERP Applications to the Cloud\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#website\",\"url\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/\",\"name\":\"Solutions Review | ERP\",\"description\":\"Software, Vendors, News and Reviews\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#\/schema\/person\/feeeb7918882f3214ef325bc102b4546\",\"name\":\"Elizabeth Quirk\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/57b5a4f7ddeacb3c21ec36e60492a204?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/57b5a4f7ddeacb3c21ec36e60492a204?s=96&d=mm&r=g\",\"caption\":\"Elizabeth Quirk\"},\"description\":\"Liz is a leading enterprise technology writer covering Enterprise Resource Planning (ERP), Business Process Management (BPM) and Talent Management Suites (TMS) at Solutions Review. She writes to bridge the gap between consumer and technical expert to help readers understand what they're looking for. Liz attended Massachusetts College of Liberal Arts, where she obtained her Bachelor of Arts Degree in English and Communications. You can reach her at equirk@solutionsreview.com\",\"sameAs\":[\"https:\/\/x.com\/Worktech_Review\"],\"url\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/author\/equirk\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The Top 7 Best Steps for a Safe Shift of ERP Applications to the Cloud","description":"ERP applications are considered to be business-critical. Here are seven steps to ensure you have a safe transfer to cloud-based ERP applications.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/top-7-best-steps-safe-shift-erp-applications-cloud\/","og_locale":"en_US","og_type":"article","og_title":"The Top 7 Best Steps for a Safe Shift of ERP Applications to the Cloud","og_description":"ERP applications are considered to be business-critical. Here are seven steps to ensure you have a safe transfer to cloud-based ERP applications.","og_url":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/top-7-best-steps-safe-shift-erp-applications-cloud\/","og_site_name":"Solutions Review | ERP","article_published_time":"2018-02-22T11:30:30+00:00","article_modified_time":"2022-07-08T16:03:14+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2018\/02\/cloud-computer.png","type":"image\/png"}],"author":"Elizabeth Quirk","twitter_card":"summary_large_image","twitter_creator":"@Worktech_Review","twitter_misc":{"Written by":"Elizabeth Quirk","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/top-7-best-steps-safe-shift-erp-applications-cloud\/","url":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/top-7-best-steps-safe-shift-erp-applications-cloud\/","name":"The Top 7 Best Steps for a Safe Shift of ERP Applications to the Cloud","isPartOf":{"@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/top-7-best-steps-safe-shift-erp-applications-cloud\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/top-7-best-steps-safe-shift-erp-applications-cloud\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2018\/02\/cloud-computer.png","datePublished":"2018-02-22T11:30:30+00:00","dateModified":"2022-07-08T16:03:14+00:00","author":{"@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#\/schema\/person\/feeeb7918882f3214ef325bc102b4546"},"description":"ERP applications are considered to be business-critical. Here are seven steps to ensure you have a safe transfer to cloud-based ERP applications.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/top-7-best-steps-safe-shift-erp-applications-cloud\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/enterprise-resource-planning\/top-7-best-steps-safe-shift-erp-applications-cloud\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/top-7-best-steps-safe-shift-erp-applications-cloud\/#primaryimage","url":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2018\/02\/cloud-computer.png","contentUrl":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2018\/02\/cloud-computer.png","width":800,"height":400},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/top-7-best-steps-safe-shift-erp-applications-cloud\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/"},{"@type":"ListItem","position":2,"name":"The Top 7 Best Steps for a Safe Shift of ERP Applications to the Cloud"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#website","url":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/","name":"Solutions Review | ERP","description":"Software, Vendors, News and Reviews","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#\/schema\/person\/feeeb7918882f3214ef325bc102b4546","name":"Elizabeth Quirk","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/57b5a4f7ddeacb3c21ec36e60492a204?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/57b5a4f7ddeacb3c21ec36e60492a204?s=96&d=mm&r=g","caption":"Elizabeth Quirk"},"description":"Liz is a leading enterprise technology writer covering Enterprise Resource Planning (ERP), Business Process Management (BPM) and Talent Management Suites (TMS) at Solutions Review. She writes to bridge the gap between consumer and technical expert to help readers understand what they're looking for. Liz attended Massachusetts College of Liberal Arts, where she obtained her Bachelor of Arts Degree in English and Communications. You can reach her at equirk@solutionsreview.com","sameAs":["https:\/\/x.com\/Worktech_Review"],"url":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/author\/equirk\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/posts\/1131"}],"collection":[{"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/users\/34"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/comments?post=1131"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/posts\/1131\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/media\/4810"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/media?parent=1131"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/categories?post=1131"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/tags?post=1131"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}