Search

Home > Intel IT > SaaS Security: Best Practices for Minimizing Risk


	Podcast:		Intel IT
	Episode:		SaaS Security: Best Practices for Minimizing Risk
	Category:		Technology
	Duration:		00:00:00
	Publish Date:		2015-10-13 10:23:02
	Description:		IT Best Practices: To support Intel business groups’ increasing demand for software-as-a-service (SaaS) applications, Intel IT has developed several best practices that can help enhance SaaS security and protect Intel’s intellectual property. SaaS applications can provide efficiency and agility, cost savings, and enhanced collaboration especially with suppliers and customers. At the same time, SaaS applications present security challenges because they are hosted on third-party infrastructure and run third-party application code. We have established the following best practices to minimize risk in the cloud: • Develop a SaaS security strategy and build a SaaS security reference architecture that reflects that strategy. • Balance risk and productivity. • Implement SaaS security controls. • Keep up with technology development. In our experience, SaaS security controls fall into the following categories: • Identity and access management controls. These controls help ensure that SaaS applications are accessed by the appropriate users and only from approved devices. • Application and data controls. As an interface to data, applications must be registered and evaluated to determine whether they meet security requirements. Data encryption, tokenization, and data loss prevention (DLP) techniques protect data and help detect storage or transmission of sensitive information in ways that do not comply with information security policy. Data controls can be applied in real-time to cloud traffic, or to content that is already stored in the cloud. • Logging and monitoring controls. These controls help us detect information security violations, send alerts to the appropriate IT staff, initiate appropriate responses, and correct the situation
	Total Play:		0