Enterprise resource planning (ERP) systems, along with associated reporting, portal, and course management software, pose serious security challenges. The EDUCAUSE/Internet2 Security Task Force conducted a survey of ERP experts in higher education and developed a procurement checklist. Risks will be presented and participants asked to prioritize these for action by vendors.