“…Much has been written about technical solutions and how to incent end-users to adopt strong security practices (Reuter et al , 2022; Hirschprung et al , 2020), developers and software engineers security practices (Naiakshina, 2019; Ploger et al , 2021), and or external penetration (Lee, 2021; Alzaqebah et al , 2023), but minimally regarding the impact of fatigue in cybersecurity response (Chen et al , 2022). Organizations have devoted their resources to address cybersecurity issues focus on endpoints and networks (Hansen, 2022) are limited to partial solutions (Pharris and Perez-Mira, 2022) or educating the end-user (Chowdhury et al , 2019; Chowdhury et al , 2022), but have overlooked a core component of the organization and its systems, the ERP. The current focus for organizations is to build defenses around the perimeter (Lloyd, 2020; Lee, 2021), not on the inner ERP or its vulnerabilities (Hansen, 2022).…”