Modernizing a Legacy ERP Without Replacing It
An ERP that has run invoicing, inventory, and payroll for fifteen or twenty years makes every overhaul project look like a leap into the void. Public audits of large replacements put numbers on that void: over a billion dollars with nothing delivered in one case, a £90M overrun in another. The problem is not the legacy system; it is how you evolve it.
TL;DR
- 1,471 IT projects studied by Flyvbjerg and Budzier (Oxford, 2011): one in six overruns its cost by 200% and its schedule by nearly 70%.
- ECSS (US Air Force): over $1 billion spent from 2004 to 2012, no capability delivered (US Senate, 2014).
- Birmingham City Council: at least £90M over budget (audit, February 2025) to replace a 1999 system running at £5.1M a year — one that worked.
- The strangler pattern (Fowler, rewritten in 2024; adopted by Microsoft Azure and AWS) replaces in small pieces: every step caps the risk and delivers its own value.
- SOAP 1.2: a stable W3C Recommendation since 2007; in 2023, 26% of Postman's 40,000+ survey respondents still used it.
- SAP maintains Business Suite 7 through end of 2027, extendable to end of 2030 (2020 announcement): time enough to proceed in steps.
A full replacement is a fat-tailed bet
This article's thesis, and it is refutable: encapsulating a legacy ERP — API, integration layer, modern front end — delivers most of the value of a modernization at a fraction of the risk of a full replacement. Not because replacements always fail: because their risk distribution is untenable.
The reference study is dated; its lesson is statistical, not seasonal. In 2011, Flyvbjerg and Budzier (Oxford) analyzed 1,471 IT projects: the average cost overrun was 27%. That average is falsely reassuring. One project in six blows up by 200% in cost and close to 70% in schedule.
Audited cases put a face on that tail:
| Replacement project | Documented outcome | Source |
|---|---|---|
| ECSS, US Air Force (2004–2012) | Over $1B spent, no operational capability delivered | US Senate, 2014 |
| Birmingham City Council ERP (go-live 2022) | Overrun of at least £90M, recovery not expected before 2026 | Public audit, February 2025 |
| 1,471 IT projects analyzed | 1 in 6: +200% cost, ~70% schedule | Flyvbjerg & Budzier, Oxford, 2011 |
The decisive detail in the Birmingham case: the replaced system had been in service since 1999 and cost £5.1M a year. It worked. The audit blames the project's governance and change management — never the product or its vendor. The legacy system was not the problem: it was an asset.
The strangler pattern caps the loss at every step
The pattern has a primary source: Martin Fowler, who named it after observing strangler figs in Queensland in 2001. His reference post, rewritten on August 22, 2024, sums up the fate of wholesale rewrites in eight words:
"Go down in flames most of the time" — Martin Fowler, on cut-over rewrites, Strangler Fig Application (August 2024 version).
The idea rests on three claims. Replacing in small components spreads the risk. Return on investment arrives earlier, while the legacy system keeps doing its job. Above all, the pattern caps the maximum loss of each step: a risk-management argument, not an architecture fashion.
This is no longer a blog opinion. Microsoft describes it in its Azure Architecture Center: a facade intercepts requests and routes them to the legacy system or to new services; "the incremental approach mitigates risks compared to large systemic changes." AWS turned it into prescriptive guidance for modernizing legacy web services, explicitly crediting Fowler. This logic of bounded steps, each delivering its own value, also shapes how we build.
Wrapping a legacy SOAP API: a well-marked path
Many ERPs in production expose their functions over SOAP. That is not a flaw: SOAP 1.2 is a 2007 W3C Recommendation, "a lightweight protocol intended for exchanging structured information" — an open, documented standard that does not expire. In 2023, 26% of Postman's 40,000+ survey respondents still used it. Wrapping a legacy SOAP API is the daily work of thousands of teams.
The approach AWS documents comes in three moves:
1. Facade : proxies acting as simple pass-throughs in front of existing SOAP services
2. Contract : each function described in an OpenAPI specification (v3.2.0, Sept. 2025)
3. Migration : progressive rerouting, service by service, to modern REST APIs
AWS recommends starting with components that are well tested, carry little technical debt, and need to evolve the most. Between the new front end and the ERP, a translation layer — the anti-corruption layer, a pattern from Eric Evans's Domain-Driven Design, documented by Microsoft — shields new services from the legacy system's semantics. Its costs are acknowledged: added latency, and one more service to operate. Encapsulation is not free; it is bounded. This step-by-step framing is detailed in our method.
The 2027 deadline is managed, not endured
The end of mainstream maintenance for SAP Business Suite 7, announced by the vendor in February 2020 for the end of 2027, feeds an urgency-to-replace narrative. Yet the same announcement provides optional extended maintenance through the end of 2030, for two additional points on the maintenance base. The vendor itself thus leaves time on the table. Encapsulation lets you use it: the facade absorbs the deadline instead of suffering it.
The opposite risk exists: an encapsulation that never "strangles" anything. The GAO (the US government's audit office) measured it in July 2025: of 10 critical legacy systems identified in 2019, only 3 had completed their modernization by February 2025. The remedy is in the pattern itself: every step must deliver standalone value — a usable front end, an integration in production — not merely prepare the next one.
What doing nothing costs — US federal agencies spend more than $100 billion a year on IT, about 80% of it operating and maintaining existing systems (GAO, July 2025). Of the 11 critical legacy systems surveyed, aged 23 to 60 years, 8 run on obsolete languages and 7 carry known security vulnerabilities. Waiting does not freeze the cost: it concentrates the risk into a future project that only grows bigger.
Replace or encapsulate: the side-by-side
Modernizing an ERP without replacing it is a decision made on comparable criteria; every figure maps to the sources at the end of this article.
| Dimension | Full replacement | Encapsulation (strangler pattern) |
|---|---|---|
| Financial risk profile | Fat tail: 1 project in 6 at +200% cost (Oxford, 2011) | Maximum loss bounded to the current step's scope |
| Documented worst case | Over $1B with nothing delivered (ECSS); ≥ £90M overrun (Birmingham, 2025 audit) | One more layer, if no step delivers standalone value |
| First return on investment | At the global go-live, years after kickoff | From the first facade in production (Fowler's central argument) |
| Operational continuity | High-stakes cutover, every process at once | The legacy system keeps serving during the transition |
| Reversibility | Low: rolling back is a project of its own | High: each piece can be unplugged or replayed independently |
| Relation to vendor timelines | Endured (e.g. end of 2027, extension to end of 2030 for Business Suite 7) | Chosen: the facade absorbs the deadline, migration sets its own pace |
| Change management | All users and all processes at once | Progressive, one functional scope at a time |
In committee, demand for every scenario the answer to a single question: what is the maximum loss if this step fails? To run this comparison on your own system, our services cover everything from auditing the existing estate to the integration layer.
The limits of this approach
Encapsulation does not apply everywhere, and Microsoft's documentation itself lists the contraindications: requests that cannot be intercepted by a facade; a system small and simple enough that direct replacement costs less than the scaffolding; an urgent need to decommission. Add the anti-corruption layer's own costs: extra latency and one more service to operate and monitor. Finally, the pattern demands delivery discipline: without standalone value at every step, you get the eternal strangler — one more layer on top of the legacy system, precisely what you set out to avoid. If your system ticks one of these boxes, direct replacement may be the right answer.
Key takeaways
- The danger of the big bang is not its average (+27% cost) but its tail: deciding in steps turns a single bet into a series of bounded risks.
- A SOAP interface in production is an asset built on an open standard: you put it behind a REST facade under an OpenAPI contract — you do not apologize for it.
- A modernization step that does not deliver its own value is not a step: it is the beginning of a dead layer.
An ERP that has run for fifteen years has already proven the essential: it does its job. The right question is not "how do we replace it," but "where do a facade, an integration layer, and a modern front end create value as early as next quarter." That is a matter of architecture and discipline, not rupture. Ownward helps companies perform better through technology — and above all, take back control.
Sources
- Permanent Subcommittee on Investigations report on the US Air Force's ECSS program — United States Senate, July 7, 2014 — accessed August 12, 2026.
- "Why Your IT Project Might Be Riskier Than You Think," Flyvbjerg & Budzier, arXiv version — University of Oxford / Harvard Business Review 2011 — accessed August 12, 2026.
- GAO-25-107795 report on modernizing critical decades-old federal legacy systems — U.S. Government Accountability Office, July 17, 2025 — accessed August 12, 2026.
- Coverage of the public audit report on Birmingham City Council's ERP program — Computer Weekly (TechTarget), February 2025 — accessed August 12, 2026.
- Martin Fowler's reference post "Strangler Fig Application" — martinfowler.com, rewritten August 22, 2024 — accessed August 12, 2026.
- Strangler Fig pattern in the Azure Architecture Center — Microsoft Learn — accessed August 12, 2026.
- Anti-Corruption Layer pattern in the Azure Architecture Center — Microsoft Learn — accessed August 12, 2026.
- AWS Prescriptive Guidance: applying the strangler fig pattern to legacy web services — AWS Prescriptive Guidance — accessed August 12, 2026.
- W3C Recommendation "SOAP Version 1.2 Part 1: Messaging Framework," 2nd edition — W3C, April 27, 2007 — accessed August 12, 2026.
- OpenAPI Specification, latest published version (3.2.0) — OpenAPI Initiative, September 19, 2025 — accessed August 12, 2026.
- Official SAP announcement on Business Suite 7 maintenance (end of 2027, option to end of 2030) — SAP, February 4, 2020 — accessed August 12, 2026.
- Postman "2023 State of the API Report," survey of 40,261 respondents — Postman (sponsor: Postman), 2023 — accessed August 12, 2026.
Data and pricing verified on August 12, 2026.
All trademarks belong to their respective owners. This article is neither sponsored nor endorsed by the vendors mentioned.
Is this on your desk right now?
Tell us where you stand. We reply with concrete elements — what we would do first, in your business.
Keep reading
All insightsSeptember 11, 2026 · 7 min read
Govern a Base Like an Internal Product
A spreadsheet updated by hand every Monday, a base built one evening that became critical: most business tools are born without an owner or rules. As long as nobody answers for them, they are not tools that last — they are shadow IT on borrowed time.
September 1, 2026 · 6 min read
Airtable as scaffolding: build what you plan to take down
In 2025, half of IT projects run over deadline, budget or scope, and nearly one in five is abandoned. Yet every internal tool starts as if it were definitive. Owning the temporary — a no-code base built in days, designed to be taken down — remains the decision nobody dares to claim.