{"id":5157,"date":"2023-05-03T10:49:41","date_gmt":"2023-05-03T14:49:41","guid":{"rendered":"https:\/\/solutionsreview.com\/network-monitoring\/?p=5157"},"modified":"2023-05-03T10:51:20","modified_gmt":"2023-05-03T14:51:20","slug":"erp-security-tackling-the-new-generation-of-cyber-criminals","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/network-monitoring\/erp-security-tackling-the-new-generation-of-cyber-criminals\/","title":{"rendered":"ERP Security: Tackling the New Generation of Cyber-Criminals"},"content":{"rendered":"

\"ERP<\/p>\n

Solutions Review\u2019s Expert Insights Series is a collection of contributed articles written by industry experts in enterprise software categories. Sadik Al-Abdulla of Onapsis<\/a> charges into a discussion on ERP security and tackling the new generation of cyber-criminals.<\/strong><\/em><\/p>\n

\"ExpertAttacks on utilities have constantly been making headlines, so much so that defending critical infrastructure has become a national imperative. Critical infrastructure attacks pose a unique threat, as they not only have the ability to destroy an organization, but can also cause real-world damage. And unfortunately, there are no signs of this stopping in 2023.<\/p>\n

With 88 percent of utility attacks being financially motivated in 2022, it\u2019s evident that cyber-criminals will do whatever it takes to make a profit. This means that we can expect threat actors to increasingly target organizations\u2019 crown jewels\u2014 the enterprise resource planning (ERP) applications that store their most sensitive corporate data and financials, and in some cases, drive the actual operations. These business applications consist of a variety of elements, such as processes and workflows, master data, and more\u2014 all while sharing data with countless other IT applications, both inside and outside the company. Due to their complexity, security teams often lack the knowledge, tools, and processes to secure these systems.<\/p>\n

Whether threat actors are looking to inflict societal damage or make money, many companies still have a long way to go to defend their critical assets and ensure their operations remain uninterrupted. And for utility companies, in particular, downtime is not an option. Let\u2019s discuss how utility security leaders can rethink their cybersecurity strategies to tackle the new sophisticated wave of threat actors more efficiently.<\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n

ERP Security and the New Generation of Cyber-Crime<\/strong><\/h2>\n
\n

Enhance Traditional Security Processes<\/strong><\/h3>\n

Many of us have heard the phrase; you\u00a0can\u2019t protect what you can\u2019t see<\/em>. This stands true for the ERP application landscape, yet many organizations continue to operate without knowing and seeing what risks are threatening their critical business systems. For example, suppose an organization fails to see a vulnerability within an internet-facing application before a threat actor does. In that case, they are essentially leaving the door to their most confidential data wide open for the taking. The ironic truth is that the current generation of ERP systems has become so powerful and so valuable due to a significant increase in connectivity and, thus, a substantial increase in attack surface and risk profile. The fundamental nature of these applications, their sophisticated architecture, and the sheer volume of custom application code have always meant they were a rich target, now elevated by the increased attack surface.<\/p>\n

Traditional vulnerability management tools generally aren\u2019t scoped to cover ERP applications like those provided by SAP and Oracle. As such, they cannot sufficiently identify the real organizational risk in complex ERP environments, and lack visibility into the most critical and sophisticated layer of these systems: the application itself. Utility organizations must improve their current security processes by incorporating tools and strategies made to protect these mission-critical systems.<\/p>\n

Invest in ERP Security Tools<\/strong><\/h3>\n

Implementing vulnerability management tools built for business applications is the first step to a robust cybersecurity program, as these can help security teams defend the assets that matter most. Such solutions equip teams with a comprehensive view of the entire application ecosystem, while proactively sending automated alerts when vulnerabilities do exist. Businesses should also consider selecting tools with monitoring and intelligence capabilities that provide detailed descriptions of each vulnerability. These strategic insights enable security teams to prioritize vulnerabilities from most to least critical, thus improving patch cadence and preventing a burdensome patch backlog.<\/p>\n

Develop a Robust Incident Response Plan<\/strong><\/h3>\n

Even with end-to-end visibility and the most vigorous security tools, a cyber-attack is inevitable. However, shutting down an ERP system in response to a cyber-attack isn\u2019t as simple as taking down a website; it would be the equivalent of shutting down the entire business, or worse, in the case of utility companies. Fortunately, organizations with thoroughly developed and tested incident response plans can dramatically reduce the impact of an attack. The key to a robust incident response strategy is to include the organization\u2019s ERP applications, as an attack on these systems would be far more complex and sensitive than the average distributed denial of service (DDoS) incident. It\u2019s also critical these plans are regularly tested to keep up with the evolving threat landscape and adjust plans as needed. Research shows that teams with regularly tested incident response plans save $2.66 million per breach compared to companies without an incident response team or well-tested plan. This could be the difference between a disastrous cyber event and a minor interruption.<\/p>\n

Protect the Nation\u2019s Utilities<\/strong><\/h3>\n

As cyber-criminals continue targeting ERP applications, utility companies must rethink their security posture to defend their critical assets. By investing in modern ERP security solutions and leveraging a well-tested incident response plan, companies can significantly improve their cyberhealth and ensure they are truly resilient. After a catastrophic cyber-attack, it is the most well-prepared teams that come out largely unscathed.<\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n

\n","protected":false},"excerpt":{"rendered":"

Solutions Review\u2019s Expert Insights Series is a collection of contributed articles written by industry experts in enterprise software categories. Sadik Al-Abdulla of Onapsis charges into a discussion on ERP security and tackling the new generation of cyber-criminals. Attacks on utilities have constantly been making headlines, so much so that defending critical infrastructure has become a […]<\/p>\n","protected":false},"author":645,"featured_media":5158,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1,21],"tags":[1848,2090,2088,2096,2095,2091,2097,2093,1684,2094,2092,2089],"acf":[],"yoast_head":"\nERP Security: Tackling the New Generation of Cyber-Criminals<\/title>\n<meta name=\"description\" content=\"Sadik Al-Abdulla of Onapsis charges into a discussion on ERP security and tackling the new generation of cyber-criminals.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/network-monitoring\/erp-security-tackling-the-new-generation-of-cyber-criminals\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"ERP Security: Tackling the New Generation of Cyber-Criminals\" \/>\n<meta property=\"og:description\" content=\"Sadik Al-Abdulla of Onapsis charges into a discussion on ERP security and tackling the new generation of cyber-criminals.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/network-monitoring\/erp-security-tackling-the-new-generation-of-cyber-criminals\/\" \/>\n<meta property=\"og:site_name\" content=\"Network Monitoring Tools & Performance Software | Solutions Review\" \/>\n<meta property=\"article:published_time\" content=\"2023-05-03T14:49:41+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-05-03T14:51:20+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/05\/ERP-Security-Tackling-the-New-Generation-of-Cyber-Criminals.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Sadik Al-Abdulla\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Sadik Al-Abdulla\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/erp-security-tackling-the-new-generation-of-cyber-criminals\/\",\"url\":\"https:\/\/solutionsreview.com\/network-monitoring\/erp-security-tackling-the-new-generation-of-cyber-criminals\/\",\"name\":\"ERP Security: Tackling the New Generation of Cyber-Criminals\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/erp-security-tackling-the-new-generation-of-cyber-criminals\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/erp-security-tackling-the-new-generation-of-cyber-criminals\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/05\/ERP-Security-Tackling-the-New-Generation-of-Cyber-Criminals.jpg\",\"datePublished\":\"2023-05-03T14:49:41+00:00\",\"dateModified\":\"2023-05-03T14:51:20+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/#\/schema\/person\/8e39b778d5091660004babf5a044948b\"},\"description\":\"Sadik Al-Abdulla of Onapsis charges into a discussion on ERP security and tackling the new generation of cyber-criminals.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/erp-security-tackling-the-new-generation-of-cyber-criminals\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/network-monitoring\/erp-security-tackling-the-new-generation-of-cyber-criminals\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/erp-security-tackling-the-new-generation-of-cyber-criminals\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/05\/ERP-Security-Tackling-the-New-Generation-of-Cyber-Criminals.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/05\/ERP-Security-Tackling-the-New-Generation-of-Cyber-Criminals.jpg\",\"width\":800,\"height\":400,\"caption\":\"ERP Security\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/erp-security-tackling-the-new-generation-of-cyber-criminals\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/network-monitoring\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"ERP Security: Tackling the New Generation of Cyber-Criminals\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/#website\",\"url\":\"https:\/\/solutionsreview.com\/network-monitoring\/\",\"name\":\"Network Monitoring Tools & Performance Software | Solutions Review\",\"description\":\"Evaluating Enterprise NPM Software, Network Observability & Packet Analysis Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/network-monitoring\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/#\/schema\/person\/8e39b778d5091660004babf5a044948b\",\"name\":\"Sadik Al-Abdulla\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/710930a420b79beaadd8c6662e400b6e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/710930a420b79beaadd8c6662e400b6e?s=96&d=mm&r=g\",\"caption\":\"Sadik Al-Abdulla\"},\"description\":\"As Chief Product Officer, Sadik is responsible for leading product vision, strategy, and execution for The Onapsis Platform. An executive leader of enterprise security businesses with more than 20 years of experience, Sadik has the insight and expertise to help customers solve today\u2019s most sophisticated security challenges. Prior to joining Onapsis, Sadik served as Vice President of Product Management for McAfee\u2019s enterprise business. Previously, Sadik held multiple leadership positions at CDW, helping to lead the security business to over 3x growth. He is a former security consultant, security researcher, and penetration tester.\",\"url\":\"https:\/\/solutionsreview.com\/network-monitoring\/author\/sadik\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"ERP Security: Tackling the New Generation of Cyber-Criminals","description":"Sadik Al-Abdulla of Onapsis charges into a discussion on ERP security and tackling the new generation of cyber-criminals.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/network-monitoring\/erp-security-tackling-the-new-generation-of-cyber-criminals\/","og_locale":"en_US","og_type":"article","og_title":"ERP Security: Tackling the New Generation of Cyber-Criminals","og_description":"Sadik Al-Abdulla of Onapsis charges into a discussion on ERP security and tackling the new generation of cyber-criminals.","og_url":"https:\/\/solutionsreview.com\/network-monitoring\/erp-security-tackling-the-new-generation-of-cyber-criminals\/","og_site_name":"Network Monitoring Tools & Performance Software | Solutions Review","article_published_time":"2023-05-03T14:49:41+00:00","article_modified_time":"2023-05-03T14:51:20+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/05\/ERP-Security-Tackling-the-New-Generation-of-Cyber-Criminals.jpg","type":"image\/jpeg"}],"author":"Sadik Al-Abdulla","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Sadik Al-Abdulla","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/network-monitoring\/erp-security-tackling-the-new-generation-of-cyber-criminals\/","url":"https:\/\/solutionsreview.com\/network-monitoring\/erp-security-tackling-the-new-generation-of-cyber-criminals\/","name":"ERP Security: Tackling the New Generation of Cyber-Criminals","isPartOf":{"@id":"https:\/\/solutionsreview.com\/network-monitoring\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/network-monitoring\/erp-security-tackling-the-new-generation-of-cyber-criminals\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/network-monitoring\/erp-security-tackling-the-new-generation-of-cyber-criminals\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/05\/ERP-Security-Tackling-the-New-Generation-of-Cyber-Criminals.jpg","datePublished":"2023-05-03T14:49:41+00:00","dateModified":"2023-05-03T14:51:20+00:00","author":{"@id":"https:\/\/solutionsreview.com\/network-monitoring\/#\/schema\/person\/8e39b778d5091660004babf5a044948b"},"description":"Sadik Al-Abdulla of Onapsis charges into a discussion on ERP security and tackling the new generation of cyber-criminals.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/network-monitoring\/erp-security-tackling-the-new-generation-of-cyber-criminals\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/network-monitoring\/erp-security-tackling-the-new-generation-of-cyber-criminals\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/network-monitoring\/erp-security-tackling-the-new-generation-of-cyber-criminals\/#primaryimage","url":"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/05\/ERP-Security-Tackling-the-New-Generation-of-Cyber-Criminals.jpg","contentUrl":"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/05\/ERP-Security-Tackling-the-New-Generation-of-Cyber-Criminals.jpg","width":800,"height":400,"caption":"ERP Security"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/network-monitoring\/erp-security-tackling-the-new-generation-of-cyber-criminals\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/network-monitoring\/"},{"@type":"ListItem","position":2,"name":"ERP Security: Tackling the New Generation of Cyber-Criminals"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/network-monitoring\/#website","url":"https:\/\/solutionsreview.com\/network-monitoring\/","name":"Network Monitoring Tools & Performance Software | Solutions Review","description":"Evaluating Enterprise NPM Software, Network Observability & Packet Analysis Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/network-monitoring\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/network-monitoring\/#\/schema\/person\/8e39b778d5091660004babf5a044948b","name":"Sadik Al-Abdulla","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/network-monitoring\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/710930a420b79beaadd8c6662e400b6e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/710930a420b79beaadd8c6662e400b6e?s=96&d=mm&r=g","caption":"Sadik Al-Abdulla"},"description":"As Chief Product Officer, Sadik is responsible for leading product vision, strategy, and execution for The Onapsis Platform. An executive leader of enterprise security businesses with more than 20 years of experience, Sadik has the insight and expertise to help customers solve today\u2019s most sophisticated security challenges. Prior to joining Onapsis, Sadik served as Vice President of Product Management for McAfee\u2019s enterprise business. Previously, Sadik held multiple leadership positions at CDW, helping to lead the security business to over 3x growth. He is a former security consultant, security researcher, and penetration tester.","url":"https:\/\/solutionsreview.com\/network-monitoring\/author\/sadik\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/posts\/5157"}],"collection":[{"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/users\/645"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/comments?post=5157"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/posts\/5157\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/media\/5158"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/media?parent=5157"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/categories?post=5157"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/tags?post=5157"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}