Why boards should be obsessed with their most ‘boring’ systems

This article argues that ERP systems (especially SAP) are now prime targets for fast-moving ransomware and exploit activity, citing the 2025 Jaguar Land Rover disruption, growing SAP vulnerabilities, and regulatory pressures (SOX, GDPR, SEC, NIS2, DORA). It urges boards and CISOs to move from compliance to resilience by quantifying ERP risk in financial terms, clarifying ownership, accelerating patching, deploying continuous monitoring, and conducting ERP-specific tabletop exercises, noting that the next major ERP-targeted event is likely already in motion.