Security
By default, if no new security rules are implemented, any CRM user who is allowed to view companies in CRM will be able to view the ERP vendor list, and may also be able to export the vendor list and use standard CRM interaction functionality with vendors. This needs to be reviewed to make sure that the correct user groups have access to the appropriate actions in CRM.
Some options available are:
No restriction: You could decide that you are comfortable with your CRM users having no restrictions on their access to ERP vendors.
Restrict the ability to export the vendor data: Restrict access to the export data functionality to certain users, user roles, or user teams, such as the purchasing manager for example.
Restrict the ability to view and otherwise use the vendor data in CRM: Restrict access to the vendor data to teams who directly use the data in day-to-day work, for example, the purchasing team.