Cybercriminals exploit technology vulnerabilities, human vulnerabilities, or both. But the biggest breaches typically start with human error. Experts often cite an unwitting or, more rarely, malicious employee as the root cause in many headline-grabbing cybersecurity attacks. Consequently, this list of top ERP security challenges references key security controls and business processes designed to prevent human errors that can lead to an ERP security breach: poor governance, access management, exposure, shared responsibility, fast-changing threat environment, customization, frequent software updates, and continuously advancing attack vectors.