Trust, but Validate
In my formative years working in audit and risk at EY, mostly within life sciences companies, I never once asked a client whether they trusted their ERP system. It would have been a strange question. Nobody trusts an ERP (people have feelings about their ERP, but trust is rarely one of them). What we asked was whether the system was controlled - or, if it was a GxP system, whether it was validated - it was the standard stuff: who had access to what, whether the audit trail was switched on, and what happened the last time something went wrong.