A security evaluation framework for cloud ERP systems is being discussed in relation to standards from NIST and ISO. The topic appears to be part of a broader conversation about cybersecurity frameworks and regulatory pressures. Various organizations and resources are providing guidance and tools on cybersecurity, including risk assessment and governance.