“The SaaS Security Capability Framework represents a significant step forward for the industry,” said Brian Soby, co-founder & CTO of SaaS security posture vendor AppOmni, and SSCF lead author. “It provides a clear, consistent, and much-needed standard that will help organizations move past outdated risk assessments and truly build zero trust principles into their SaaS environments.”
Toward more consistent SaaS security controls
The industry has long struggled with a lack of consistent SaaS security controls. Without an industry standard, enterprises, SaaS vendors, and security teams have ended up duplicating efforts or carrying unnecessary risks.
The SSCF tackles this long-standing challenge by offering a practical framework of security capabilities that can be adopted by SaaS vendors, providing more consistency across the industry while reducing potential security risks.