Cloud 101CircleEventsBlog
Our website will be down for scheduled maintenance on February 13th from 4:00 PM to 5:00 PM PST. We apologize for any inconvenience and appreciate your patience!

Download Publication

SaaS AI-Risk for Mid-Market Organizations Survey Report
SaaS AI-Risk for Mid-Market Organizations Survey Report

SaaS AI-Risk for Mid-Market Organizations Survey Report

Release Date: 01/27/2025

Mid-market organizations are struggling to manage expanding Software as a Service (SaaS) environments. To better understand this challenge, Wing Security asked CSA to develop a survey report on the current state of SaaS security. Focusing on middle-market companies, this report explores misconfigurations, AI-driven threats, strategy gaps, and much more. CSA conducted the survey online in October 2024 and received 406 responses.

The survey results show that mid-market organizations are making progress in recognizing and addressing SaaS security risks. However, significant gaps remain. Organizations should prioritize adopting specialized technologies that enhance visibility. They should also work on automating processes and addressing critical security gaps, such as sensitive data leaks to third parties. By following this guidance and other insights covered in the report, mid-market businesses will have an easier time navigating the evolving SaaS landscape.

Key Findings:
  • Many mid-market organizations struggle to manage the sheer volume of SaaS applications. Only about ⅔ of companies (69%) report having 50 or fewer sanctioned applications. A similar number of organizations (68%) report 50 or fewer unsanctioned ones.
  • The majority of organizations (66%) plan to prioritize configuration management for critical applications like Microsoft 365, Google Workspace, and Salesforce. However, not many (28%) plan to automate configuration management across all applications.
  • The majority of organizations (75%) show a moderate to high level of concern about AI-related risks in SaaS. However, a concerning number of them (33%) either lack a dedicated role or are unsure who holds responsibility for AI risk management.
  • Currently, several organizations (48%) rely on manual processes to manage SaaS risks. Many others (48%) utilize Cloud Access Security Brokers (CASBs).
  • Hardly any organizations (3%) report having a dedicated budget for SaaS security. Instead, most of them (89%) integrate SaaS security into broader initiatives like risk management, compliance, and identity posture.
Download this Resource

Bookmark
Share
Related resources
AI Organizational Responsibilities: AI Tools and Applications
AI Organizational Responsibilities: AI Tools an...
Zero Trust Guidance for Small and Medium Size Businesses (SMBs)
Zero Trust Guidance for Small and Medium Size B...
Map the Transaction Flows for Zero Trust
Map the Transaction Flows for Zero Trust
AI in Agriculture: Smarter Crops, Healthier Livestock, Better Yields
AI in Agriculture: Smarter Crops, Healthier Livestock, Better Yields
Published: 02/10/2025
Agentic AI Threat Modeling Framework: MAESTRO
Agentic AI Threat Modeling Framework: MAESTRO
Published: 02/06/2025
From 2024 to 2025: How These GRC Trends are Reshaping the Industry
From 2024 to 2025: How These GRC Trends are Reshaping the Industry
Published: 02/05/2025
Bias Testing for AI in the Workplace: Why Companies Need to Identify Bias Now
Bias Testing for AI in the Workplace: Why Companies Need to Identif...
Published: 02/05/2025
Cloudbytes Webinar Series
Cloudbytes Webinar Series
January 1 | Online

Acknowledgements

Hillary Baron
Hillary Baron
Senior Technical Director - Research, CSA

Hillary Baron

Senior Technical Director - Research, CSA

Are you a research volunteer? Request to have your profile displayed on the website here.

Interested in helping develop research with CSA?

Related Certificates & Training