You're faced with conflicting opinions on securing your ERP system. How do you choose the best approach?

This is the correct approach. First you need to identify which type of data you are dealing with. If the data contains PII then the data security will also consider regional rules for example GDPR if the data or subject is in the EU. For other types of data, security measures will depend on its type. This approach will help in optimising the cost of Data Protection

1. Identify type of security threats based on implementation architecture ( On-Premises/ Cloud) 2. Brainstorm with available expert for that particular type of threat be it data, cyber-attack, regulations, downtime etc. 3. Suggested solution should not only focus on current situation rather it should accommodate extension and future aspects as well 4. Prepare risk assessment boulders 5. Prepare risk management boulders 6. Conflict will definitely go off once details analysis, pros and cons analysis is taken care off by team

I concur on the assessment of needs. Building further, answering Why and Why Now are key. Why can be answered by the voice of stakeholders - which needs an effective stakeholder analysis as a prerequisite. This enables the collation and prioritisation of objectives. These need broken into capabilities -process, application, data, security, infrastructure, their current and desirable levels, associated measures of success forms the foundation. This needs bolstered by the extremely specific needs of the sector, of the competitive advantage as manifested by scenarios that the organisation executes. These are in context of current enterprise architecture, commercial arrangements, skill matrix, ability to absorb changes and cost of ownership.

When faced with conflicting opinions on securing my ERP system,I assess the specific risks and needs of the system, including data sensitivity and regulatory requirements. Consulting cybersecurity experts who specialize in ERP helps me understand industry best practices and tailor a security strategy to my needs. I evaluate different security approaches based on their effectiveness, scalability, and cost, ensuring they integrate well with my existing system and IT infrastructure.Reviewing case studies of similar organizations provides valuable insights, and I conduct pilot tests to assess the impact of chosen measures. Finally, I implement ongoing monitoring and regular updates to adapt to evolving threats and maintain effective protection.

387 / 5.000 I try to gather a variety of perspectives before deciding on the best approach. I always start by gathering input from internal IT experts, ERP vendors, and independent security consultants. This will give me insights based on their unique experiences. However, it’s important to critically evaluate the applicability of each piece of advice to your specific situation.

In der heutigen Zeit, wo software as a service immer mehr an Bedeutung gewinnt, sollten sich viele Unternehmen die Frage stellen, ob sie die Sicherheitsfrage überhaupt intern l?sen wollen oder beispielsweise Microsoft in die Hand geben wollen. Nach dem Prinzip schuster bleib bei deinen Leisten finde ich es sehr wichtig, dass sich ein Unternehmen auf seine St?rken fokussiert. Also ein Produktionsbetrieb auf die Produktion von gewissen Gütern und eben ein Cloud Betrieb auf die Zurverfügungstellung von online Speicher und Arbeitsspeicher. Viele Unternehmen sind somit gar nicht in der Lage, eine echte Risikoanalyse zu diesem Thema, insbesondere im Hinblick auf die n?chsten fünf oder zehn Jahren zu machen.

In these situations, it’s crucial to make informed decisions that consider all aspects of your business. Sometimes, this means opting for a less popular approach because it better aligns with your specific requirements. The important thing is that your security choices are strategic and well-informed to protect what’s most critical to your operation.