SaaS/Cloud Governance Best Practices

• Does your company allow SaaS solutions to be utilized?
• Is there a Corporate SaaS and governance policy in place?
• Does your policy require IT involvement and/or approval?
• Is IT engaged in the selection and management of SaaS solutions?
• Do you have an example of a SaaS policy you are authorized to share? If so, please forward a copy to Mary @ SIG.
• How does your organization ensure that the business does not sign an agreement with a SaaS solution provider that has not been vetted by corporate IT security and vendor management?
• How do you ensure that all SaaS agreements are vetted and negotiated by the correct organization in the company, i.e. Vendor management office, Indirect Sourcing, procurement, etc.
• Is your organization working to standardize SLA(s) across your vendor base? If so, how is being received? If not, how do you manage the SLA(s) differences across providers?
• Do you have an example of a SaaS master agreement you are authorized to share? If so, please forward a copy to Mary @ SIG.
• Any other recommendations in managing a growing population of SaaS solutions?

Categories: P2P Archive
SRC Type: Cloud-Based Outsourcing, Information Technology Outsourcing (ITO), Outsourcing