Which aspect of a SaaS application requires compliance with local organizational security policies?

Which aspect of a SaaS application requires compliance with local organizational security policies?
A . Types of physical storage media used
B . Data-at-rest encryption standards
C . Acceptable use of the SaaS application
D . Vulnerability scanning and management

View Answer

Answer: C

Explanation:

SaaS applications are cloud-based software that users can access from anywhere and any device. This poses a challenge for organizations to ensure that their employees are using the SaaS applications in a secure and compliant manner. Therefore, organizations need to establish and enforce acceptable use policies (AUPs) for SaaS applications that define the rules and guidelines for accessing and using the applications, such as who can use them, what data can be stored or shared, and what actions are prohibited12. AUPs help organizations to protect their data, prevent unauthorized access, and

comply with local regulations and standards3.

Reference: Using Software as a Service (SaaS) securely

– NCSC, Minimum Security Standards for Software-as-a-Service (SaaS) and Platform-as-a-Service (PaaS) | University IT, How to Secure Your SaaS Applications – CyberArk