ARMI - KN

Digital Transformation projects can make or break an organization.

ERP Digital Transformation projects can make or break an organization.

There are several significant headwinds management is facing when scoping, bidding, and awarding the various contracts that are necessary to have a successful implementation.  In 2025, we wrote a series of articles and participated in several webinars.  If you didn’t catch them, you can access them here.

“The definition of insanity is doing the same things over and over again but expecting different results”, attributed to Albert Einstein. I am writing this six-part article series about Why ERP Implementations Fail – to help you avoid a failed or a ‘less than optimal’ ERP implementation. In part 1, 2 and 3 we have covered the following topics: 

We are witnessing the most significant digital transformation in global history – surpassing the massive Y2K tech boom. This shift is largely driven by evolving cyber security risks in our work from home era and modernization of business processes. 

Hopefully by now you have heard that Oracle is rolling out a major change to the login process and management thereof for Oracle Cloud. This change is starting will roll out to customers after the 25B quarterly update goes live. Here’s a brief, high-level overview of what this will look like.

Having been in this space for over 25 years, I have seen the good, the bad, and the ugly.  The deck is stacked against a secure and compliant ERP system implementation. Most publicly traded organizations implementing a new ERP system likely will have one or more “Significant Deficiencies” in the first year that should be reflected in audit findings. However, auditor ignorance often prevents these from being recognized.

Organizations are implementing new SaaS ERP systems to modernize their enterprise.  Traditional cybersecurity risks are being outsourced to the software provider, yet certain cybersecurity risks still need to be addressed by management.

Oracle ERP / HCM Cloud is an evolving suite of applications. Most organizations that consider implementing an ERP/HCM Cloud likely believe the “foundation” of the applications are solid.  Unfortunately, that is not the case.  We currently track over 200 enhancement requests that we, and others, have submitted.  However, there are some significant gaps for public and private organizations, especially those that need this highest level of security via Oracle’s FedRamp offering.

There’s a Lack of Native MFA in ERP/HCM Cloud.

Oracle released this article in March highlighting the top cybersecurity threats and how to prevent them. In the article, they highlight the number one risk as “Business Email Compromise (BEC).”

Perhaps the most important control organizations implement is the control related to the review and approval of journal entries.  Most organizations using ERP Cloud implement the journal approval workflow to help automate the control.  In this video, we present a way that a User can bypass the journal approval workflow and undermine this key control.