ChaptersCircleEventsBlog
Join us for the in-person CCSK Azure course at Black Hat from August 4–5! Register now for a hands-on deep dive and secure your spot now!

Download Publication

Top 20 Critical Controls for Cloud ERP Customers
Top 20 Critical Controls for Cloud ERP Customers

Top 20 Critical Controls for Cloud ERP Customers

Release Date: 06/10/2019

This document aims to be a guide for assessing and prioritizing the most
critical controls that organizations should take into account when trying
to secure their business-critical applications in the cloud. The document
also contains an overview of cloud ERP security, control details and
associated threats and risks.
Download this Resource

Bookmark
Share
Related resources
Critical Controls Implementation for Oracle Fusion Applications
Critical Controls Implementation for Oracle Fus...
Critical Controls Implementation for Salesforce
Critical Controls Implementation for Salesforce
Critical Controls Implementation for Oracle E-Business Suite
Critical Controls Implementation for Oracle E-B...
Why Do Organizations Migrate to the Public Cloud? Hint: It Isn’t About Cost Anymore
Why Do Organizations Migrate to the Public Cloud? Hint: It Isn’t Ab...
Published: 06/26/2025
A Data-Driven Look at the Top Security Tools for Startups
A Data-Driven Look at the Top Security Tools for Startups
Published: 06/03/2025
How the CISO Drives Value Across the Enterprise
How the CISO Drives Value Across the Enterprise
Published: 09/22/2023
Build a Strong SAP Security Strategy With the NIST Framework
Build a Strong SAP Security Strategy With the NIST Framework
Published: 12/22/2022

Acknowledgements

Michael Roza
Michael Roza
Risk, Audit, Control and Compliance Professional at EVC

Michael Roza

Risk, Audit, Control and Compliance Professional at EVC

Michael Roza is a seasoned risk, audit, control and compliance, and cybersecurity professional with over 20 years of experience across multinational enterprises and startups. As a Cloud Security Alliance (CSA) Research member for over 10 years, he has led and contributed to more than 140 CSA projects spanning Zero Trust, AI, IoT, Top Threats, DecSecOps, Cloud Key Management, Cloud Control Matrix, and many others.

He has co-chaired...

Read more

Victor Chin Headshot Missing
Victor Chin

Victor Chin

Juan Perez-Etchegoyen
Juan Perez-Etchegoyen

Juan Perez-Etchegoyen

As CTO and co-founder of Onapsis, JP leads the innovation and research teams that keeps Onapsis on the cutting edge of the Business-Critical Application Security market, addressing some of the most complex problems that organizations are currently facing while managing and securing their ERP landscapes. JP helps manage the development of new products as well as support the ERP cybersecurity research efforts that have garnered critical a...

Read more

Greg Jensen Headshot Missing
Greg Jensen

Greg Jensen

Tom Evgey Headshot Missing
Tom Evgey

Tom Evgey

Yazan Almasri Headshot Missing
Yazan Almasri

Yazan Almasri

Alvin Law Headshot Missing
Alvin Law

Alvin Law

Brian Brooks Headshot Missing
Brian Brooks

Brian Brooks

Michael Fasere Headshot Missing
Michael Fasere

Michael Fasere

Are you a research volunteer? Request to have your profile displayed on the website here.

Interested in helping develop research with CSA?

Related Certificates & Training