What are the main security risks of employees accessing SaaS applications through mobile phones? How to avoid it?

The difference between traditional enterprise SaaS and enterprise local deployment APP is that

1. Enterprises need to interface AD with SaaS, and sometimes maintain a set of accounts for security or separately.

2.SaaS clients are not developed or designated by enterprises, so SaaS service providers may not consider security, meet certain security standards (such as strong identity authentication, local data encryption, data transmission encryption, data leakage prevention), or provide some enterprise-controllable interfaces (such as auditing, application capability control, personalized configuration, etc.). ).

3, poor experience, different SaaS can not use the same set of accounts, or use the same set of accounts can not achieve SSO.

4.SaaS application may be initiated by the business department, but it has not been audited and post-managed by enterprise IT, which is a streaking business. It's actually very dangerous. This is what we often call shadow IT.

Solution:

At present, enterprise SaaS industry has begun to formulate enterprise security standards, and maybe SaaS service providers will also start to implement them in the future to improve security standards and achieve a better user experience.

Enterprise SaaS is also a part of enterprise mobility, which belongs to the category of EMM product management and manages the security of mobile devices, personnel, apps and data. At present, some EMM vendors have been able to support SaaS management, such as Guo Xin Tong Ling and Airwatch.