Cloud Security Podcast by Google
EP148 Decoding SaaS Security: Demystifying Breaches, Vulnerabilities, and Vendor Responsibilities
Nov 12, 2023
Adrian Sanabria, Director of Valence Threat Labs, talks about the structured approach to securing SaaS and the realistic threats to SaaS tools. They discuss the Microsoft 365 breach and the need for CVEs in SaaS vulnerabilities. The least understood aspects of securing SaaS are also addressed. The misconception that SaaS vendors handle all security responsibilities is debunked. The importance of IAM culture and hygiene governance in SaaS security is emphasized.
29:44
Episode guests
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- Recent breaches have highlighted the need for customers to take steps to secure their own SaaS usage.
- Effective SaaS security requires attention to detail and a focus on hygiene and governance practices.
Deep dives
Securing SaaS: Challenges and Unique Aspects
Securing SaaS platforms poses unique challenges. Each SaaS platform has its own configuration options and security features. Many businesses assume that configuring security settings is sufficient to secure SaaS, but recent breaches have shown that the risk of a SaaS vendor being breached is not negligible. While top-tier vendors may have stronger security measures, paper security, contracts, and questionnaires are not always enough. Shared responsibility between customers and SaaS vendors can be blurred, making it necessary for customers to take steps to secure their own SaaS usage.
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
