For decades, securing enterprise resource planning (ERP) systems was straightforward. Data sat safely on-premise, literally “in the basement.” Firewalls and local access controls could contain risks.