Rogue SaaS Poses Security Nightmare

Rogue SaaS Poses Security Nightmare

By Doug Barney

There have always been rogue end users -- that’s how PCs came to dominate in the first place. The cloud poses a bigger threat to IT as these apps and services are far harder to control.

McAfee is now warning of the onslaught of unapproved SaaS apps, and how they might cause data leakage and open the doors to hackers.

The results are stunning, but maybe not surprising when you think about it. According to the research, actually performed by Frost & Sullivan’s Stratecast division, over 80 percent of workers are using rogue SaaS tools while at work. And for IT workers, the numbers are even higher!

Like PCs decades ago, these SaaS apps fall under the notion of Shadow IT where users and departments take IT initiatives into their own hands. While a boon to productivity, the lack of IT control creates security, data leakage and compliance problems. The trick for IT is to try to be nimble enough to actually support, protect and manage these applications, making end users happy while keeping the enterprise safe. These rogue apps are part of what’s driving the SaaS market, which Frost & Sullivan believes is growing at a CAGR of 16 percent, and poised to hit $23.5 billion in 2017.

“There are risks associated with non-sanctioned SaaS subscriptions infiltrating the corporation, particularly related to security, compliance, and availability,” said Lynda Stadtmueller, program director of the Cloud Computing analysis service within Stratecast. “Without appropriate knowledge, non-technical employees may choose SaaS providers or configurations that do not measure up to corporate standards for data protection and encryption. They may not realize that their use of such applications may violate regulations concerning handling and storage of private customer data, leaving the company liable for breaches.”

The number one rogue SaaS app, Microsoft may be happy to hear, is Office 365 that is used by 9 percent of those polled, even outstripping LinkedIn and Facebook. While some may see unapproved app dangers as an idle threat, some 15 percent of those polled have had a liability or security event occur.

“With over 80 percent of employees admitting to using non-approved SaaS in their jobs, businesses clearly need to protect themselves while still enabling access to applications that help employees be more productive,” said Pat Calhoun, general manager of network security at McAfee. “The best approach is to deploy solutions that transparently monitor SaaS applications and other forms of web traffic, and uniformly apply enterprise policies, without restricting employees’ ability to do their jobs better. These not only enable secure access to SaaS applications, but can also encrypt sensitive information, prevent data loss, protect against malware, and enable IT to enforce acceptable usage policies.” 




Edited by Cassandra Tucker
Get stories like this delivered straight to your inbox. [Free eNews Subscription]

MSPToday Editor at Large

SHARE THIS ARTICLE
Related Articles

More Partners Look to Offer AI/ML Solutions, a Potential New Revenue Stream

By: Greg Tavarez    12/1/2023

A recent TD SYNNEX report revealed that 37% of partners have already incorporated AI/ML solutions into their offerings, and an additional 40% of partn…

Read More

Accenture Expands Footprint, Capabilities in Spain with Innotec Security Acquisition

By: Greg Tavarez    11/30/2023

Accenture expanded its capabilities and footprint in Spain, where 70% of CEOs from large organizations are concerned about their organizations' abilit…

Read More

Majority of Organizations Unprepared to Handle Targeted Cyberattack

By: Greg Tavarez    11/30/2023

The majority of CISOs and 53% of CEOs believe that their organization is unprepared to cope with a targeted cyberattack in the next 12 months, accordi…

Read More

Majority of IT Decision-Makers Opt for Service Provider Support in Cloud Migrations

By: Greg Tavarez    11/30/2023

Many IT leaders say they rely on service provider assistance for successful cloud migrations, according to a recent RapidScale study.

Read More

Alef and Frontera Collaborate and Expand Private Mobile Networks Platform Reach in Schools

By: Greg Tavarez    11/29/2023

Alef recently teamed up with Frontera Consulting Group to provide equal access to quality education, regardless of a student's economic background.

Read More