Governance, Risk, and Compliance

Enterprise Resource Planning (ERP) serves as a cornerstone in ensuring effective Governance, Risk, and Compliance (GRC) within organizations. By integrating GRC modules, ERP systems provide a centralized platform to manage and monitor governance practices, identify and mitigate risks, and ensure compliance with regulatory requirements. This  approach enhances transparency and accountability across various business processes. ERP’s real-time reporting and analytics capabilities enable organizations to proactively identify potential risks and address compliance issues promptly. The integration of GRC within ERP streamlines workflows, promoting a culture of risk-aware decision-making. This synergy empowers organizations to navigate complex regulatory landscapes, mitigate risks efficiently, and uphold the highest standards of governance, ensuring a resilient and compliant operational environment.

IBM Brings OpenAI Cyber Models into Enterprise AppSec Workflows
IBM has launched a new application security service using OpenAI's capabilities to help enterprises quickly identify software vulnerabilities, as part of its broader initiative to integrate frontier AI into cyber defense while ensuring controlled access and governance.
Global E-Invoicing Mandates Are Becoming an ERP Architecture Test
Sovos Compliance Network launches into a mandate wave that is pushing tax compliance directly into ERP transaction flows. For finance, tax, and architecture teams, e-invoicing is becoming a permanent operating condition rather than a series of local deadline projects.
Tax compliance and readiness
Does Your ERP Know What Tax Regime You’re In? A Compliance Readiness FAQ for Enterprise Finance Leaders
Tax compliance has evolved into a critical board-level consideration for ERP systems, emphasizing the need for real-time reporting, continuous transaction controls, and adaptable architectures while leveraging AI to address compliance challenges across jurisdictions.
Trusted AI
Tricentis California Deal Puts AI Testing Governance in the Spotlight
Tricentis has expanded its software licensing contract with California to offer its AI-driven quality engineering platform to state agencies, while emphasizing that AI-generated testing must be governed by evidence and compliance, essential for SAP teams in regulated environments.
Workday Is Testing How Much Enterprise AI Should Be Allowed to Do
Workday’s Q1 results showed agent adoption momentum. The follow-up question is whether Sana, Microsoft 365 Copilot, the Agent System of Record, and federal HR automation can prove that enterprise agents can act inside governed workflows without eroding control.
Tax compliance and readiness
KPMG Puts Global Tax Incentives Inside Its Claude-Powered Gateway
KPMG has expanded its Digital Gateway by integrating the Incentive Credit Opportunity Navigator (ICON) in partnership with Incentify, providing clients a streamlined platform to identify and act on global tax credits and incentives efficiently, alongside a minority equity investment in the AI-driven technology firm.
IBM and Microsoft Move Identity Security from Alerts to Action
IBM Consulting has expanded its collaboration with Microsoft Security to enhance identity threat detection and remediation services, enabling enterprises to effectively manage and respond to identity-based attacks through unified security signals and governed workflows.
The SAP Migration Decision in 2026: Three Companies, Three Answers, One Urgent Security Context
In 2026, three distinct approaches to SAP migration are highlighted by Lwart Environmental Solutions, which opts to extend its current system for operational stability; Victrola, which successfully executes a greenfield migration to SAP Cloud ERP with significant reporting efficiencies; and Reveal USA, which emphasizes proving value before transformation by guaranteeing an 8x return on investment, reflecting a market grappling with simultaneous technical, operational, and security challenges.
Why Oracle Cloud ERP License Costs Can Creep Up After Go-Live
SafePaaS emphasizes that Oracle Cloud ERP customers must monitor license governance as part of access control to avoid unexpected costs from role sprawl and excessive privileges post-implementation.
LEAP Consulting Group Links ERP Modernization with Audit-Ready GRC Demand
LEAP Consulting Group reports growing demand for its Enterprise ERP and GRC services as regulated industries seek a unified partner for modernizing finance systems while ensuring compliance and audit readiness.
AI access restrictions
US Order to Halt Access to Anthropic Models Turns AI Access into Enterprise Risk
Anthropic was ordered by the US government to suspend access to its Claude Fable 5 and Mythos 5 AI models for foreign nationals due to national security concerns, marking a significant escalation in government control over AI access.
Enterprise software stocks
Anthropic’s Fable 5 Release Renewed Pressure on Enterprise Software Stocks, Valuations
On June 9, enterprise software stocks like Workday, Oracle, and Palantir Technologies saw declines of around 3% due to renewed investor concerns following Anthropic's launch of Claude Fable 5 and Claude Mythos 5, which hinted at AI's potential to disrupt traditional software subscription models and raised questions about the sustainability of pricing in an increasingly AI-driven landscape.
Court Ruling AI Overviews
German Court Raises Legal Stakes for Google’s AI-Generated Search Answers
A German court has held Google directly liable for false claims made by its AI Overviews, differentiating them from traditional search results due to their generation of new statements, thereby establishing heightened accountability for AI outputs.
Before AI Agents Can Touch the ERP: An Infrastructure FAQ Checklist for Enterprise Leaders
The gap between organizations' aspirations for enterprise AI agents and the necessary infrastructure to implement them safely is widening, emphasized by key developments in data platform competition, API readiness challenges, increasing data center demands, and heightened security risks, urging ERP and IT leaders to investigate and address these critical infrastructure needs promptly.
Enterprise IT monitoring environment with multiple screens displaying system data, representing SAP security patching and authorization risk management.
SAP June Security Patch Day Puts ERP Trust Controls Under Pressure
SAP's June 2026 Security Patch Day highlighted significant ERP security risks, delivering 15 new Security Notes with a focus on foundational trust layers like SAML authentication and RFC communication, emphasizing the need for organizations to prioritize the remediation of vulnerabilities that affect authentication, access control, and supply chain risks in their SAP environments.
Security analyst monitoring code and identity access controls across multiple screens following accelerated AI-driven breach activity
SAP June Patch Day Brings Four Critical Fixes Across NetWeaver, ABAP, Commerce Cloud
SAP's June 2026 Security Patch Day issued four critical fixes for vulnerabilities affecting SAP NetWeaver, ABAP, Java, Commerce Cloud, and Data Hub, prompting priority patch application to safeguard systems, as outlined in 15 new security notes highlighting risks in authentication and memory management.
ERP migration
Jefferson Parish Sets July 1 Go-Live for Infor Public Sector ERP
Jefferson Parish, Louisiana, is set to implement its Infor Public Sector ERP system, BRIDGE, on July 1, marking a transition from its legacy financial management system to improve operational efficiency, with a significant blackout period and new supplier portal mandates affecting finance and procurement activities.
Lwart Extends SAP ECC 6 as Factory Expansion Raises ERP Migration Risk
Lwart Environmental Solutions has opted to maintain its SAP ECC 6 system amid a significant factory expansion, prioritizing stability and operational continuity over immediate ERP modernization.
Business silhouettes behind blue glass panels, illustrating AI pricing, billing, and revenue recognition across enterprise finance systems.
Zuora Suite Helps Companies Connect AI Pricing, Billing, and Revenue Recognition
Zuora’s AI Monetization Suite connects AI pricing, billing, usage data, and revenue recognition as companies commercialize AI products through usage, credits, commitments, and hybrid models.
European Union flag in front of modern glass office buildings symbolizing cloud sovereignty and digital regulation in Europe.
Europe’s Tech Sovereignty Package Puts Cloud, AI, Chips and Open Source Under One Policy Roof
The EU's new European Technological Sovereignty Package aims to reduce reliance on non-EU digital infrastructure by promoting domestic capabilities in semiconductors, cloud, and AI through the Chips Act 2.0, Cloud and AI Development Act, and an emphasis on open source strategies, while also addressing energy constraints and competitiveness in the technology sector.
Anthropic Project Glasswing expansion
Anthropic Expands Project Glasswing into Critical Infrastructure
Anthropic has expanded Project Glasswing to 150 additional organizations across more than 15 countries, bringing its AI-powered cyberdefense program into power, water, healthcare, communications, and other critical infrastructure sectors.
SAP’s Autonomous Finance Push Turns CFO Attention to Governance
SAP’s autonomous finance push is moving CFO priorities toward governance, controls, and AI-ready financial processes. For SAP customers, the opportunity depends on how well automation, GRC, and finance transformation connect inside ERP operations.
Private Equity in ERP
Private Equity’s ERP Upgrade Push Has a Controls Problem
Private equity firms are increasingly willing to fund cloud ERP modernization for portfolio companies, recognizing that outdated systems can significantly reduce valuation, thus emphasizing the importance of incorporating internal controls early in the transformation process to mitigate risks and enhance operational efficiency.
Smartphone displaying a security lock, illustrating Microsoft SMS sign-in changes and ERP identity readiness.
Microsoft Is Killing SMS Sign-in Codes. ERP Teams Should Pay Attention
Microsoft’s move away from SMS sign-in codes is limited to personal accounts, but ERP teams should still pay attention. Developer subscriptions, sandbox tenants, contractor accounts, shared credentials, and break-glass workflows can sit outside formal Entra ID governance, creating hidden exposure as authentication models shift.
ServiceNow Knowledge 2026
ServiceNow Repositioned Around AI Security and Governance at Knowledge 2026
ServiceNow positions itself as a governance and action layer for enterprise AI, launching Autonomous Security and Risk, enhancing the AI Control Tower for comprehensive governance, and making its Action Fabric available to external agents, amidst a backdrop of growing financial momentum and challenges in broad adoption.
SAP agentic AI manufacturing Hannover Messe 2026
Q&A: Tirumala Rao Chimpiri on Why ERP Modernization Fails After Go-Live
Organizations often struggle with ERP modernization post-go-live due to inadequate focus on operational discipline, governance, and continuous improvement, where successful implementation doesn’t guarantee that workflows and processes have meaningfully changed or improved.
SAP Sapphire Madrid
SAP Sapphire Madrid: Autonomous Enterprise Pitch Meets Europe’s AI Control Test
At SAP Sapphire Madrid, the company introduced the Autonomous Enterprise as the next evolution in ERP, focusing on AI-driven solutions tailored for European markets, emphasizing sovereignty and regulatory compliance in data handling and operational control.
Boomi World 2026
Boomi World 2026 Pushes Enterprise Platform Toward Agentic AI Governance
At Boomi World 2026, Boomi unveiled a comprehensive strategy to transition AI agents from pilot programs to enterprise workflows through enhanced orchestration, connectivity, context, and governance, supported by partnerships with Red Hat and Couchbase, ultimately positioning itself as an active data foundation for the emerging 'agentic enterprise'.
The Impact of the Sovereignty Gap in Enterprise Architecture
Recent power outages and data center disruptions have challenged the assumption that cloud infrastructure is resilient, highlighting the necessity for enterprises to develop data sovereignty.
Epicor Insights 2026 Makes Cloud Migration a Trust Test, and It Is Not Alone
At Epicor Insights 2026, the company faces its most consequential conference yet: with on-premises Kinetic development ending at the 2028.1 release, the pressure is on to demonstrate that cloud ERP migration is not just necessary for manufacturers and distributors — but genuinely worth it. This analysis examines how Epicor is addressing the trust gap through security governance, data architecture strategy, and change management, and what still needs to be proven on the conference floor.