A study of ERP security issues produced a checklist that shows institutions what to look for while letting vendors know what campuses consider important.