The security and privacy considerations of implementing an academic ERP system