Join Randy and Jim as they talk about the implications of last month's CrowdStrike outage, and how you, as a security leader, can help avoid that kind of impact in the future.

Join Randy and Jim as they talk about what a Red Team is, and is not, for your cybersecurity organization.

Hey there, Leader Today. In today's episode of Security on Tap, we dive deep into the world of Software as a Service (SaaS). Join Randy and Jim as they explore what SaaS is, why it poses significant security risks, and what steps you can take to mitigate those dangers.

We start with an eye-opening statistic: the average company used around 15 SaaS services in 2015-2016, but that number has skyrocketed to 150-200 today. This explosive growth has led to a shift where many non-core business processes are now housed outside the core business, creating a blurred network boundary and increasing vulnerabilities.

Randy breaks down SaaS for beginners, explaining how it works and citing major providers like Workday, Salesforce, and Microsoft 365. They discuss real-world breaches involving giants like Microsoft and Snowflake, highlighting the significant risks posed by SaaS environments.

The episode also delves into the challenges of managing third-party risk and the pressures faced by SaaS providers to grow rapidly, sometimes at the expense of robust security measures. They debate the need for industry standards or government regulations to ensure SaaS providers maintain stringent security protocols.

Finally, Randy and Jim offer practical advice for security practitioners, emphasizing the importance of understanding your company's critical business processes, assessing the risk posed by third-party vendors, and having contingency plans in place.

Whether you're a seasoned security leader or new to the field, this episode provides valuable insights into managing SaaS risks and keeping your organization secure.