Chapter 4, Problem 6DQ

Program Plan Intro

Software as a Service (SaaS):

• It is a service that allows businesses to subscribe to web-delivered application software.
• SaaS vendors contain Oracle, SAP, NetSuite, Salesforce, and Google.

Explanation of Solution

Precautions to minimize the security risks of SaaS:

• Develop a SaaS security approach and construct a SaaS security reference design that reflect approach.
• Implement security controls in SaaS.
  • There are three security controls in SaaS which are given below:
  • Access management controls:
    • These controls are support to ensure that applications in SaaS are accessed by the authorized users and only from accepted machines.
  • Application and data controls:
    • The data is protected by using the three techniques such as data encryption, tokenization and data lost prevention techniques...