Governance, Risk, and Compliance

Enterprise Resource Planning (ERP) serves as a cornerstone in ensuring effective Governance, Risk, and Compliance (GRC) within organizations. By integrating GRC modules, ERP systems provide a centralized platform to manage and monitor governance practices, identify and mitigate risks, and ensure compliance with regulatory requirements. This  approach enhances transparency and accountability across various business processes. ERP’s real-time reporting and analytics capabilities enable organizations to proactively identify potential risks and address compliance issues promptly. The integration of GRC within ERP streamlines workflows, promoting a culture of risk-aware decision-making. This synergy empowers organizations to navigate complex regulatory landscapes, mitigate risks efficiently, and uphold the highest standards of governance, ensuring a resilient and compliant operational environment.

Enterprise IT monitoring environment with multiple screens displaying system data, representing SAP security patching and authorization risk management.
SAP June Security Patch Day Puts ERP Trust Controls Under Pressure
SAP's June 2026 Security Patch Day highlighted significant ERP security risks, delivering 15 new Security Notes with a focus on foundational trust layers like SAML authentication and RFC communication, emphasizing the need for organizations to prioritize the remediation of vulnerabilities that affect authentication, access control, and supply chain risks in their SAP environments.
Security analyst monitoring code and identity access controls across multiple screens following accelerated AI-driven breach activity
SAP June Patch Day Brings Four Critical Fixes Across NetWeaver, ABAP, Commerce Cloud
SAP's June 2026 Security Patch Day issued four critical fixes for vulnerabilities affecting SAP NetWeaver, ABAP, Java, Commerce Cloud, and Data Hub, prompting priority patch application to safeguard systems, as outlined in 15 new security notes highlighting risks in authentication and memory management.
ERP migration
Jefferson Parish Sets July 1 Go-Live for Infor Public Sector ERP
Jefferson Parish, Louisiana, is set to implement its Infor Public Sector ERP system, BRIDGE, on July 1, marking a transition from its legacy financial management system to improve operational efficiency, with a significant blackout period and new supplier portal mandates affecting finance and procurement activities.
Lwart Extends SAP ECC 6 as Factory Expansion Raises ERP Migration Risk
Lwart Environmental Solutions has opted to maintain its SAP ECC 6 system amid a significant factory expansion, prioritizing stability and operational continuity over immediate ERP modernization.
Business silhouettes behind blue glass panels, illustrating AI pricing, billing, and revenue recognition across enterprise finance systems.
Zuora Suite Helps Companies Connect AI Pricing, Billing, and Revenue Recognition
Zuora’s AI Monetization Suite connects AI pricing, billing, usage data, and revenue recognition as companies commercialize AI products through usage, credits, commitments, and hybrid models.
European Union flag in front of modern glass office buildings symbolizing cloud sovereignty and digital regulation in Europe.
Europe’s Tech Sovereignty Package Puts Cloud, AI, Chips and Open Source Under One Policy Roof
The EU's new European Technological Sovereignty Package aims to reduce reliance on non-EU digital infrastructure by promoting domestic capabilities in semiconductors, cloud, and AI through the Chips Act 2.0, Cloud and AI Development Act, and an emphasis on open source strategies, while also addressing energy constraints and competitiveness in the technology sector.
Anthropic Project Glasswing expansion
Anthropic Expands Project Glasswing into Critical Infrastructure
Anthropic has expanded Project Glasswing to 150 additional organizations across more than 15 countries, bringing its AI-powered cyberdefense program into power, water, healthcare, communications, and other critical infrastructure sectors.
SAP’s Autonomous Finance Push Turns CFO Attention to Governance
SAP’s autonomous finance push is moving CFO priorities toward governance, controls, and AI-ready financial processes. For SAP customers, the opportunity depends on how well automation, GRC, and finance transformation connect inside ERP operations.
Private Equity in ERP
Private Equity’s ERP Upgrade Push Has a Controls Problem
Private equity firms are increasingly willing to fund cloud ERP modernization for portfolio companies, recognizing that outdated systems can significantly reduce valuation, thus emphasizing the importance of incorporating internal controls early in the transformation process to mitigate risks and enhance operational efficiency.
Smartphone displaying a security lock, illustrating Microsoft SMS sign-in changes and ERP identity readiness.
Microsoft Is Killing SMS Sign-in Codes. ERP Teams Should Pay Attention
Microsoft’s move away from SMS sign-in codes is limited to personal accounts, but ERP teams should still pay attention. Developer subscriptions, sandbox tenants, contractor accounts, shared credentials, and break-glass workflows can sit outside formal Entra ID governance, creating hidden exposure as authentication models shift.
ServiceNow Knowledge 2026
ServiceNow Repositioned Around AI Security and Governance at Knowledge 2026
ServiceNow positions itself as a governance and action layer for enterprise AI, launching Autonomous Security and Risk, enhancing the AI Control Tower for comprehensive governance, and making its Action Fabric available to external agents, amidst a backdrop of growing financial momentum and challenges in broad adoption.
SAP agentic AI manufacturing Hannover Messe 2026
Q&A: Tirumala Rao Chimpiri on Why ERP Modernization Fails After Go-Live
Organizations often struggle with ERP modernization post-go-live due to inadequate focus on operational discipline, governance, and continuous improvement, where successful implementation doesn’t guarantee that workflows and processes have meaningfully changed or improved.
SAP Sapphire Madrid
SAP Sapphire Madrid: Autonomous Enterprise Pitch Meets Europe’s AI Control Test
At SAP Sapphire Madrid, the company introduced the Autonomous Enterprise as the next evolution in ERP, focusing on AI-driven solutions tailored for European markets, emphasizing sovereignty and regulatory compliance in data handling and operational control.
Boomi World 2026
Boomi World 2026 Pushes Enterprise Platform Toward Agentic AI Governance
At Boomi World 2026, Boomi unveiled a comprehensive strategy to transition AI agents from pilot programs to enterprise workflows through enhanced orchestration, connectivity, context, and governance, supported by partnerships with Red Hat and Couchbase, ultimately positioning itself as an active data foundation for the emerging 'agentic enterprise'.
The Impact of the Sovereignty Gap in Enterprise Architecture
Recent power outages and data center disruptions have challenged the assumption that cloud infrastructure is resilient, highlighting the necessity for enterprises to develop data sovereignty.
Epicor Insights 2026 Makes Cloud Migration a Trust Test, and It Is Not Alone
At Epicor Insights 2026, the company faces its most consequential conference yet: with on-premises Kinetic development ending at the 2028.1 release, the pressure is on to demonstrate that cloud ERP migration is not just necessary for manufacturers and distributors — but genuinely worth it. This analysis examines how Epicor is addressing the trust gap through security governance, data architecture strategy, and change management, and what still needs to be proven on the conference floor.
EU flag displayed on the glass exterior of the European Parliament building, representing ERP governance questions around the EU AI Act delay.
What the EU AI Act Delay Means for ERP Governance
The EU AI Act delay eases some near-term compliance pressure, but ERP teams still need to build governance evidence around how AI is used across business processes.
Software developers working at laptops, representing SAP Security Patch Day May 2026 risks across developer tooling and software supply chains.
SAP Security Patch Day May 2026 Shows Risk Beyond Core Applications
SAP’s May 2026 Security Patch Day shows why SAP teams need to look beyond severity scores. Critical vulnerabilities affected S/4HANA and Commerce Cloud, while Mini Shai-Hulud brought developer tooling, credentials, and supply-chain exposure into the SAP security conversation.
SAP Autonomous Enterprise
Sapphire’s Post-Keynote Q&A Unpacks The Hard Part of the Autonomous Enterprise: Delivery, Governance, Trust
The post-keynote Q&A at SAP Sapphire 2026 put SAP's Autonomous Enterprise strategy under the closest scrutiny yet, with executives pressed on what's actually ready for production, how hybrid and on-premise customers participate, and why enterprises should trust AI agents inside live business processes. This ERP Today analysis unpacks SAP's answers on AI governance, the Knowledge Graph differentiator, cloud migration strategy, and API compliance controls.
Sage Future 2026 Recap: AI Transparency and Smarter ERP Decisions
At Sage Future 2026, the focus on AI in ERP shifted from capability to the necessity of trust and transparency, with a strong emphasis on glass box AI that is traceable and auditable, reflecting the need for accountability in financial workflows to enhance operational efficiency across various industries.
Why Late Change Management Dooms ERP Transformation Projects
Despite substantial investments in ERP and transformation programs across the public sector, a significant majority are predicted to fail in achieving their original business goals due to a lack of readiness for operational change, highlighting the need for organizations to integrate behavior change and process standardization.
Sage Future 2026: Julie Adams
Julie Adams, SVP of Construction at Sage, highlighting challenges and opportunities for ERP systems in the construction industry in a video interview at Sage Future 2026 in San Francisco.
Sage Future 2026: Jon Fasoli
Jon Fasoli, SVP of Sage Intacct, discusses how the cloud financial technology is helping improve operations and management for their customers in many industry in a video interview at Sage Future.
Finance AI
EY and Rillet Partner to Embed Risk and Controls Into AI-Native Finance Transformation
EY US and Rillet are partnering to embed risk and controls directly into AI-native finance workflows, signaling a shift in how enterprise finance transformation programs are designed and delivered.
ERP securities investigation
Tennant ERP Fallout Extends into Ongoing Securities Scrutiny as Investors Await Recovery Signals
Tennant Company's ERP-related disruption has moved beyond operational recovery into an active ERP securities investigation, as investors and legal teams scrutinize the company's pre-failure disclosures and question management's credibility going forward.
Rootstock Ready Cuts ERP Implementation Time, Costs for Midmarket Manufacturers
Rootstock Software has introduced Rootstock Ready, a streamlined ERP solution for midmarket manufacturers and distributors that offers a fixed-fee implementation model, promising faster deployment, reduced costs and immediate access to AI readiness on the Salesforce platform.
Office infrastructure representing SAP API policy, ERP integration, AI access, and controlled enterprise data pathways.
SAP API Policy Raises New Questions About ERP Integration and AI Access
SAP’s updated API policy is raising questions about ERP integration, AI access, and partner products. The policy puts new scrutiny on undocumented APIs, large-scale extraction, and the supported pathways customers and partners use to access SAP data.
ERP Today Transformation Award
ERP Today 2025 Awards: Large Enterprise Transformation Sets New Benchmarks
Zalaris won the Large Enterprise Transformation Award for its successful payroll modernization project with Ryanair, while Onapsis was recognized as runner-up for its ERP security transformation that integrated risk management into enterprise processes.
Sage HCM Targets Cost Gaps Bleeding Product Manufacturers Dry
Manufacturers, facing tight margins, are turning to Sage HCM to unify HR, payroll, and financial data in real time, enabling better visibility and management of labor costs to prevent margin losses.
Sign at the National Institute of Standards and Technology (NIST) campus, highlighting the agency behind CVE and NVD vulnerability standards.
What NIST’s CVE Shift Means for ERP Security Teams
NIST is changing how CVEs are enriched in the National Vulnerability Database, reducing the consistency of risk signals used to prioritize vulnerabilities. For ERP security teams, the shift increases reliance on vendor guidance and system-specific context to assess exposure.