An Author’s Taxonomy of Customer-Observable Security Controls in SaaS Platforms
A taxonomy that classifies security controls for SaaS platforms by the degree to which they are observable to the tenant is introduced, giving tenants a shared language for procurement, contractual negotiations, and continuous assurance, and gives providers a roadmap for increasing visibility into their controls.