Information Security

I'm glad my answer was helpful! The CAIQ I mentioned before is designed to assess the security controls of all three providers – SaaS, IaaS, and PaaS. The questionnaire contains yes/no questions, which makes it easy to determine whether the provider is ... More

Good day Jamie, Thank you for this insightful information - much appreciated! What we attempt in our assessment (my team is only responsible for the Security assessment aspect) we have the basic questions in terms of Security posture, policies, ISMS ... More

This message was posted by a user wishing to remain anonymous Thank you for this insightful information Christine! How would you recommend vetting for IaaS and PaaS supplier (only in terms of the Security Controls)? Anyone in the community using ... More

Michael, please see the HECVAT (Higher Education Cloud Vendor Assessment Tool) that's used by Universities to assess cloud vendors. These questions apply to any cloud vendor. Here's the link: Higher Education Community Vendor Assessment Toolkit | EDUCAUSE ... More

It might be difficult to develop a template to vet SaaS vendors, since this is such a broad category. However, I'll provide some best practices and recommendations that should help you get started in vetting SaaS vendors. Best practices for assessing ... More