2022年9月2日

一項針對美國、英國和歐洲企業的SaaS使用情況的新研究強調了SaaS應用程序的消費和安全性之間的顯著差異。事實上，大多數受訪者(74%)表示，他們的應用程序中有一半以上是基於SaaS的，英國70%的組織報告稱，如今在SaaS應用程序上的支出比一年前更多。但隨著使用率的提高和成本的增加，大多數組織報告SaaS安全在緊迫性和優先級方麵落後。在接受調查的英國企業中，62%的企業將SaaS安全排在當前安全優先級的第四位或更低，隻有32%的企業表示擔心SaaS應用使用量增加帶來的成本。Axonius首席執行官Dean Sysman表示:“目前，SaaS應用的最大問題是，大多數組織都低估了其環境中SaaS應用程序的數量。“SaaS提供了許多好處，包括更大的靈活性、可訪問性、生產力的提高等等——任何人都可以注冊SaaS應用程序並將其連接到工作數據。但這也帶來了巨大的風險。IT和安全團隊已經在努力識別存在於他們組織中的資產。SaaS應用程序進一步複雜化了它們獲取數據和互連的可見性、管理配置、消除安全漏洞以及跟蹤許可、使用和支出的能力。“79%的英國受訪者承認，SaaS應用程序的增加導致其組織的複雜性和安全風險增加。但當被問及為什麼安全不是更令人擔憂的問題時，英國受訪者指出時間和資源有限(38%)，人員短缺(23%)，以及來自高管層的專注於其他問題的壓力(15%)。 “The appetite for SaaS will only continue to grow, further exacerbating data sprawl and security implications,” said Jerich Beason , Commercial Bank CISO and Axonius advisor. “These risks are no longer hypothetical, and without full visibility into the SaaS application landscape, organizations will continue to find themselves vulnerable to data loss from shadow SaaS, non-compliance with federal and industry regulators, and financial strain from lack of insight into organizational spend. Businesses can no longer wait to rein in SaaS complexity.” In the UK, 77% of respondents said knowing the amount of sensitive data being held in SaaS applications will most likely influence them to prioritize SaaS security in the future. Only 62% of U.S. organizations stated the same. Additionally, 39% of UK organizations said data loss was their biggest concern when it came to SaaS application risks. We’re already witnessing the consequences of insecure SaaS environments and potential data loss. In March, Okta announced that its platform has been the victim of a targeted security attack . In April, GitHub Security announced an investigation into abused stolen OAuth user tokens issued to two third-party OAuth integrators, Heroku and Travis-CI. To address SaaS security risks, it’s become clear that organisations need to rethink their priorities and adopt a different approach to SaaS security. Daily Newsletter - E-mail sent every business day with a recap of the last 24 hours Weekly Newsletter - E-mail sent every Monday with a recap of the last 7 days (IN)SECURE Newsletter - Monthly newsletter with the most interesting articles