SaaS Security Checklist

What Is It?

A series of targeted security related questions across a number of key functional areas which enables an organisation to evaluate the risks associated with using a given Software as a Service (SaaS) service/application. It can be used to evaluate both existing services or as part of the procurement process to assess risks during decision making

When an application is ‘in the cloud’ we have less direct control of the security of that application and its data. This requires us to investigate the level of protection in place as to most appropriately protect our users’ data, privacy and ongoing operations.
Not understanding the risks associated with a given solution precludes the ability to plan to mitigate or address them, or indeed to respond effectively in the event of a cyber incident
Inability to meet compliance and regulatory obligations

When an application is ‘in the cloud’ we have less direct control of the security of that application and its data. This requires us to investigate the level of protection in place as to most appropriately protect our users’ data, privacy and ongoing operations.
Not understanding the risks associated with a given solution precludes the ability to plan to mitigate or address them, or indeed to respond effectively in the event of a cyber incident
Inability to meet compliance and regulatory obligations

Better informed procurement decision making due to greater understanding a given solution’s level of risk
More effective security risk management due to greater visibility of a solution’s security posture
Greater regulatory and audit compliance