How End-Users Could Secure Their SaaS Apps

Source: pixabay

Cybersecurity and SaaS management company, Axonius, has released its survey results on SaaS usage among enterprises. In today’s digital business environment, 76% of companies use SaaS-based products in more than half of their applications. Another 66% spent more on SaaS applications today than a year ago.

Moreover, companies spend the most on SaaS compared to other cloud services. Analysts project SaaS spending to reach $176.6 billion—a 16% year-over-year growth—in end-user spending in 2022.

However, the survey also showed that many companies are ignoring SaaS security. In fact, 60% ranked SaaS security fourth or lower on their list of current security priorities. Also, only 34% said that they’re worried about SaaS security.

The survey covered businesses in the United States, the United Kingdom, and Europe.

Are Companies Neglecting SaaS Security?

As we learned from the survey, SaaS has become an integral part of business growth. In 2021, organizations worldwide were using an average of 110 SaaS applications. But security is not in the top three priorities in the rising adoption of SaaS. This is despite 66% of respondents believing that the number of SaaS apps in their tech stack also results in more complexities and increased security risks.

The survey cited three top reasons why SaaS security is falling behind in investments. These are lack of time and resources (28%), pressure from the C-Suite to prioritize other issues (23%), and staffing shortages (15%).

We know that the IT skills shortage has long been a pressing problem. Companies and vendors are trying to fill the shortage by creating low-code/no-code SaaS platforms. But hiring skilled workers for IT-related jobs is still a challenge, especially when the Great Resignation involved thousands of software developers, engineers, and security experts leaving their jobs.

Because of the shortage in staff, time, and resources, the C-Suite might be forced to choose which problems to prioritize. For example, companies are aware of Shadow IT—where employees use unapproved apps and devices. Forty-six percent of respondents have already started rolling out restrictions to prohibit Shadow SaaS. But for the rest, security has to wait.

What Can Users Do to Secure Their SaaS Apps?

Cybersecurity statistics show that as technological advancements increase, so does the incidence of cyberattacks. This makes it even more urgent for SaaS users to secure their apps as they continue to grow their tech stacks. In fact, more than 50% of the survey respondents have experienced a data breach caused by a third-party app or service.

To address SaaS security, security teams must also use technology. Services like SaaS management or cybersecurity asset management combine experts and technology such as automation and AI to assist end-users in securing endpoints and addressing SaaS misconfigurations.

Companies could also look into managed services providers (MSPs). MSPs offer a  variety of IT outsourcing services that solve issues like skills shortage and infrastructure costs.

SaaS adoption will continue to grow. The productivity gains, flexibility, and accessibility that users get from SaaS apps are benefits that are too hard to miss out on—even if there are security risks involved. The key is to start managing these risks early in the implementation of SaaS into business workflows. The consequences of neglect—non-compliance with government and industry regulations, financial decimation, and ruined reputation—are not options for a business that wants to thrive in its industry.