An ERP system (Enterprise Resource Planning) is integrated business software that combines processes such as financial accounting, procurement, production, warehouse management, and human resources on a single platform. Well-known examples include SAP, Oracle, and Microsoft Dynamics.
ERP systems are among an organization’s most critical assets: they contain financial data, customer data, supplier information, and often personal data as well. In the ISMS context, an ERP system demands particular attention regarding access control, authorization management, patch management, and backup. The complexity of ERP permission structures makes regular access-rights recertification especially important.