Almost two-thirds of businesses are planning to migrate an enterprise resource planning (ERP) system to the cloud or are already doing so, despite many of them having concerns about moving sensitive data, security and regulatory compliance.
That is according to the Cloud Security Alliance (CSA), which asked 200 businesses about ERP migration plans. They represent a small slice of a big market: businesses will spend $30 billion (€26.5 billion) on cloud ERP systems in 2021, and a total of $266 billion (€235 billion) on all public cloud services, according to CSA’s Impact of Cloud on ERP report.
Scalability was the most common reason for ERP moving to the cloud, cited by 65% of respondents, followed by lower cost of ownership (61%) and security patching and updating by the provider (49%).
Cloud concerns
Moving sensitive data gave businesses the biggest pause for thought: 65% cited it among their top concerns about moving ERP to the cloud. To make use of the cloud native migration tools providing access control and encryption of data at rest and in transit, though, businesses will need to re-architect their systems for the cloud environment, CSA warned.
This rules out the fastest way of getting a workload into the cloud, lift and shift, which would simply perpetuate existing problems with patching and access controls. And it means enterprises wanting to move their ERP systems to the cloud have more design work ahead of them than just specifying the kinds of server instances and storage they want.
Security concerns were raised by 59% of respondents, despite some evidence that security in the cloud can be an improvement over that of on-premises systems. The security challenge for enterprises is not the cloud itself but their own policies, configurations and technologies, according to CSA, which warns that 95% of cloud security failures are the customer’s fault.
Businesses on the whole are confident about the security of their systems: 51% claimed not to have had any ERP-related security incidents in the preceding two years, while 44% took the more realistic view that they did not know if they had had any. The remaining 5% reported an average of 3.8 security incidents each over the preceding two years.
CSA asked businesses about the security products protecting their cloud ERP systems. Identity and access management was in use by 68% of them; firewalls by 63%, vulnerability assessments by 62%, and intrusion detection and prevention systems (IDS/IPS) by 59%. Only 38% used a security information and event management system (SIEM) and 29% a cloud access security broker (CASB).
Other concerns about moving ERP to the cloud included compliance challenges (54%), disruption to business operations caused by the migration process (47%), and the time taken to migrate data (46%).
Migration missteps
Enterprises have good reason to worry about delays in migrating data: 90% of CIOs have already experienced data migration projects not going as planned due to the complexity of moving from on-premises to the cloud. Only a quarter met their deadlines for such data migrations, with the average data migration taking 12 months.
Those missed deadlines hide two areas of concern for CIOs: the difficulty of accurately estimating how long data migrations will take and the number of unexpected problems they may encounter along the way. Businesses moving data to the cloud need to plan for the worst and ensure that their ongoing business will not be impacted if there are delays.
Following the data
Much of this data is ending up with Amazon Web Services, the destination for 28% of the businesses surveyed, or Microsoft Azure (25%). SAP’s cloud is picking up another 14%, IBM’s 10% and Oracle’s 8%.
Contrast that with the ERP systems used by the businesses surveyed: 52% of them use SAP (rising to 70% among businesses with 50,000 employees or more. Oracle’s ERP is used by 36%, and Microsoft Dynamics by 24%, rising to 50% among businesses with fewer than 5,000 employees, a category accounting for half the respondents.
IDG News Service
Ltd
