Download Publication
Who it's for:
cybersecurity professionals
SaaS Security and Misconfigurations Report
Release Date: 04/11/2022
Working Group: SaaS Governance
Many recent breaches and data leaks have been tied back to misconfigurations causing it to be a top concern for many organizations. Most research related to misconfigurations has focused strictly on the IaaS layers and ignores the SaaS stack entirely. Yet, SaaS security and misconfigurations are equally crucial to the organization's overall security. For these reasons, CSA developed and distributed a survey to better understand the use of SaaS applications, timeline and tools for SaaS security assessments, a timeframe for misconfiguration detection and remediation, and awareness of security tools for SaaS applications.
The goal of this survey was to understand the current state of SaaS security and misconfigurations. Key areas of interest include:
The goal of this survey was to understand the current state of SaaS security and misconfigurations. Key areas of interest include:
- Use of SaaS applications with organizations
- Methods, policies, and tools for assessing SaaS app security
- Timeline for detecting and remediating misconfigurations in SaaS app security
- Awareness of new SaaS security related products
Download this Resource
Share
Related resources
Sponsor
Related Resources
.jpeg)
.jpeg)
Acknowledgements
Josh Buker
Research Analyst, CSA
Josh Buker
Research Analyst, CSA
Shamun Mahmud
Senior Research Analyst, CSA
Shamun Mahmud
Senior Research Analyst, CSA
Alex Kaluza
Research Analyst, CSA
Alex Kaluza
Research Analyst, CSA
John Yeoh
Chief Scientific Officer, CSA
John Yeoh
Chief Scientific Officer, CSA
With over 15 years of experience in research and technology, John excels at executive-level leadership, relationship management, and strategy development. He is a published author, technologist, and researcher with areas of expertise in cybersecurity, cloud computing, information security, and next generation technology (IoT, Big Data, SecaaS, Quantum). John specializes in risk management, third party assessment, GRC, data protection, incid...
Hillary Baron
AVP of Research, CSA
Hillary Baron
AVP of Research, CSA
Sean Heide
Sean Heide
Are you a research volunteer? Request to have your profile displayed on the website here.
Interested in helping develop research with CSA?
Related Certificates & Training
Learn the core concepts, best practices and recommendation for securing an organization on the cloud regardless of the provider or platform. Covering all 14 domains from the CSA Security Guidance v4, recommendations from ENISA, and the Cloud Controls Matrix, you will come away understanding how to leverage information from CSA's vendor-neutral research to keep data secure on the cloud.
Learn more
Learn more