Working Group
Enterprise Resource Planning
The Enterprise Resource Planning (ERP) working group seeks to develop best practices to enable organizations that run their business on large ERP implementations, such as SAP or Oracle applications, to securely migrate to and operate in cloud environments.
View Current Projects
Critical Controls Implementation for Oracle E-Business Suite
Working Group Leadership
Juan Perez-Etchegoyen
As CTO and co-founder of Onapsis, JP leads the innovation and research teams that keeps Onapsis on the cutting edge of the Business-Critical Application Security market, addressing some of the most complex problems that organizations are currently facing while managing and securing their ERP landscapes. JP helps manage the development of new products as well as support the ERP cybersecurity research efforts that have garnered critical a...
Working Group Co-Chairs
Mariano Nunez
As CEO, Mariano drives the strategic direction of the company. Under his leadership, Onapsis has become the market leader in protecting business applications and one of the fastest-growing technology and cybersecurity companies in the world.
Mariano has 20+ years of experience in the cybersecurity industry, both as an executive and as a cyber security expert. He was the first to publicly present on cybersecurity risks affecting ERP platf...
| Publications in Review | Open Until |
|---|---|
| Data Security within AI Environments | Aug 29, 2025 |
| AICM Auditing Guidelines | Sep 03, 2025 |
| A Practitioner’s Guide to Post-Quantum Cryptography | Sep 17, 2025 |
| Cloud Threat Modeling 2025 | Sep 19, 2025 |
Who can join?
Anyone can join a working group, whether you have years of experience or want to just participate as a fly on the wall.
What is the time commitment?
The time commitment for this group varies depending on the project. You can spend a 15 minutes helping review a publication that's nearly finished or help author a publication from start to finish.
Virtual Meetings
Attend our next meeting. You can just listen in to decide if this group is a good for you or you can choose to actively participate. During these calls we discuss current projects, and well as share ideas for new projects. This is a good way to meet the other members of the group. You can view all research meetings here.
Open Peer Reviews
Peer reviews allow security professionals from around the world to provide feedback on CSA research before it is published.