Is your organization truly secure when it comes to
\nSoftware-as-a-Service (SaaS) deployments?<\/b> Many Chief Information Security
\nOfficers (CISOs) face a troubling reality: they hold accountability for
\nsecurity breaches without having direct control over SaaS implementations. This
\ndisconnect between responsibility and control can lead to serious security
\nvulnerabilities.<\/p>\n
SaaS platforms are popular because they are easy to deploy
\nand enhance business efficiency. However, this simplicity can also lead to
\nsignificant security oversight. Often, the decision to implement SaaS
\napplications is made by business units without involving the security team.
\nThis lack of visibility into SaaS deployments creates potential risks.<\/p>\n
A recent survey by AppOmni, which analyzed 644 organizations
\nusing SaaS, reveals a startling trend: in 50% of organizations, securing SaaS
\napplications is left entirely to business owners or stakeholders. Only 15% of
\norganizations entrust their cybersecurity teams with full responsibility for
\nsecuring SaaS implementations. This fragmented approach to security can lead to
\nconfusion and vulnerabilities.<\/p>\n
One of the most concerning findings is that 34% of
\norganizations don\u2019t even know how many SaaS applications are in use within
\ntheir operations. For example, 49% of Microsoft 365 users believe they have
\nfewer than 10 applications connected to the platform. However, AppOmni\u2019s
\ntelemetry suggests the actual number is closer to 1,000. This gap in awareness
\npresents an attractive target for cybercriminals.<\/p>\n
SaaS platforms are particularly appealing to attackers
\nbecause they often present a one-to-many opportunity. If a SaaS provider\u2019s
\nsystem is breached, attackers can potentially access data from multiple
\ncustomers. The 2019 Capital One hack, which exposed personal information from
\nover 100 million credit applications, and the 2022 LastPass breach, which
\ncompromised millions of customer passwords and encrypted data, are clear
\nexamples of this risk.<\/p>\n
However, not all attacks follow this pattern. The 2024
\nSnowflake-related breaches, for instance, involved a more complex method.
\nMandiant\u2019s research suggests a single threat actor used many stolen credentials
\nfrom various sources to gain access to individual customer accounts and then
\ntargeted those customers.<\/p>\n
While SaaS providers typically have robust security
\nmeasures, customers often rely too heavily on the provider\u2019s security,
\nneglecting their own responsibilities. Shockingly, 8% of organizations don\u2019t
\nconduct security audits because they trust their SaaS providers completely.
\nYet, many SaaS breaches result from attackers using legitimate credentials to
\ngain access. This issue was a key topic at BlackHat 2024, where AppOmni
\ndiscussed how stolen credentials have turned SaaS applications into playgrounds
\nfor attackers.<\/p>\n
One of the underlying problems is a lack of understanding
\nwithin organizations regarding the SaaS principle of “shared
\nresponsibility.” The concept is straightforward: while SaaS providers
\nhandle infrastructure security, customers are responsible for access control.
\nUnfortunately, Mandiant\u2019s research indicates that many customers fail to engage
\nwith this responsibility, leading to breaches that could have been prevented
\nthrough better access management, such as using multi-factor authentication
\n(MFA) and regularly rotating passwords.<\/p>\n
The challenge is determining where this responsibility
\nshould reside within an organization. While security teams are best equipped to
\nmanage passwords and MFA, only 15% of organizations assign them full
\nresponsibility for SaaS security. Alarmingly, 50% of organizations leave this
\ncritical task entirely in the hands of non-security personnel.<\/p>\n
Brendan O\u2019Connor, CEO of AppOmni, underscores the severity
\nof the situation: \u201cOur report last year highlighted the disconnect between
\nsecurity self-assessments and actual SaaS risks. Now, despite greater awareness
\nand effort, things are getting worse. The number of SaaS exploits has reached
\n31%, up five percentage points from last year. Despite increased budgets and
\ninitiatives, organizations must do a far better job of securing SaaS
\ndeployments.\u201d<\/p>\n
The key takeaway is clear: SaaS security needs to be a top
\npriority. Regardless of how easy SaaS platforms are to deploy or how much they
\nimprove business operations, they should never be implemented without the
\ninvolvement and oversight of the CISO and the security team. Ensuring that SaaS
\nsecurity is continuously managed and monitored is essential for protecting your
\norganization from potential threats.<\/p>\n","protected":false},"excerpt":{"rendered":"
Is your organization truly secure when it comes to Software-as-a-Service (SaaS) deployments? Many Chief Information Security Officers (CISOs) face a troubling reality: they hold accountability for security breaches without having […]<\/p>\n","protected":false},"author":1,"featured_media":280,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[],"tags":[],"class_list":["post-281","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"_links":{"self":[{"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/posts\/281","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/comments?post=281"}],"version-history":[{"count":0,"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/posts\/281\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/media\/280"}],"wp:attachment":[{"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/media?parent=281"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/categories?post=281"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/tags?post=281"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}