ANALYSIS OF CONFIDENTIAL DATA STORAGE TECHNOLOGIES IN CRM/ERP BUSINESS PROCESS MANAGEMENT SYSTEMS OF AN ENTERPRISE

Abstract

The article examines CRM (Customer Relationship Management) / ERP (Enterprise Resource Planning) systems as established components of modern business processes with an emphasis on the features of their architecture and, accordingly, advantages and vulnerabilities, as well as the need to improve the means of secure storage of confidential data and minimize the risks of unauthorized access to them. The purpose of the study is to analyze modern technologies for storing and protecting confidential data in CRM/ERP business process management systems and provide practical recommendations for improving the security of information storage in the context of escalating cyber threats. The results of the study demonstrate that the cloud architecture of CRM/ERP systems has advantages (automatic updates, including security updates, lower operating costs for maintenance). In addition, social engineering is an extremely serious threat to secure data storage using CRM/ERP systems. The GDPR and ISO/IEC 27001 standards can help mitigate this threat. However, due to technical factors (GDPR is rarely updated, ISO/IEC 27001 is advisory), these standards can only be considered one component of a comprehensive digital business security. To ensure data confidentiality is maintained, a comprehensive security strategy should be followed, which should be regularly reviewed in line with changes in the threat and risk landscape. A list of effective measures to enhance the security of sensitive data storage is provided, with an emphasis on the need for further efforts to identify potential risks and explore ways to mitigate them.