Securing Software as a Service (SaaS)

54mIntermediate2023-05-08

Authors

Jerich Beason

Chief Information Security Officer, Podcast Host, Speaker

Course details

Software as a service (SaaS) makes up the majority of all cloud consumption, but guidance for cloud security commonly focuses on IaaS. This course is designed to help organizations implement security measures to mitigate the cybersecurity risks specifically introduced by the use of SaaS applications, which often contain extremely sensitive information.

Join instructor and cybersecurity expert Jerich Beason to learn all about the SaaS threat landscape, the security controls lifecycle, options for security tooling, and more. Whether you’re a cybersecurity professional working on a high-level IT team, or a career changer building up new skills, this course equips you with the technical know-how to start protecting your part of the SaaS app shared responsibility model.

Skills covered

Incident ResponseCloud ServicesCybersecurityCloud ComputingDeep Dive (X:Y)

Concepts

0. Introduction

01 - SaaS security course introduction
02 - Why SaaS security matters

1. SaaS Threat Landscape

03 - SaaS is leading the pack
04 - SaaS risk and threats
05 - Shared responsibility model

2. SaaS Security Controls Lifecycle

06 - Evaluation - Pre-purchase
07 - SaaS asset and risk identification
08 - Preventative SaaS security measures
09 - Detect SaaS cyberattacks
10 - Respond to and recover from SaaS attacks
11 - SaaS government risk and compliance

3. SaaS Security Tooling

12 - CASB - Cloud access security broker
13 - Identity as a service
14 - SSPM - SaaS security posture management
15 - Security ratings

4. Bonus Lessons

16 - Understanding OAuth
17 - SaaS security use case - Data storage and collaboration

Conclusion

18 - You are now a SaaS security SME