Information Security Research Library

Outsourcing an application means your organization relinquishes some control. In this article Heather Clancy will offer seven questions that you should resolve with your provider before investing in SaaS. Who handles penetration testing and how is it done? What are the sign on, access and authentication policies? What encryption policies will protect data as it is transferred or when is it being stored? These are the types of questions you need to consider when moving to SaaS.