Always maintain ownership of domain names and control domain access when services can be accessed by your users. That way, if you terminate a vendor relationship, you will not have to retrain your clients on the correct URL to use to find you.
SaaS brings with it a unique set of challenges for those responsible for security. Barmak Meftah, senior vice president at Fortify Software, says the most important shift is looking at your software vendor not as a product company, but rather as a service provider in a guest commentary over at our CTO Edge site. Sound vendor management practices dictate that any third-party software is at least as secure as in-house packages, Meftah advises.
We've taken his checklist of steps to ensure that a SaaS vendor's solution is secure and listed them in this handy slideshow, but do be sure to check out Meftah's full column. His final piece of advice? Remember that software is secure only when it’s built that way.