Reducing the exposure of Strathmore Associates' own data across six SaaS platforms and 38 million files: the incident that started it, a confidential bid pack reachable through a 13-month-old anyone link; an exposure score of sensitivity times reach times persistence; and the exposure board of eight tiles moved from exposed to reduced — sensitive anyone links from 212,000 to 9,800, Tier 1 OAuth apps from 180 to 41, misconfigured sites from 310 to 0, new sensitive links from 5,900 a week to 410, and a remediation wave whose breakage cost 9,800 dollars instead of the 410,000 of the overnight script it replaced.

CY-EXPERT-048Expert Level · SaaS Security

SaaS Data Exposure Program Optimisation — The Exposure Board

An expert-level course on measuring, prioritising and reducing the exposure of your own data across SaaS tenants at scale - without breaking the business - and keeping it reduced. Work the exposure board - eight tiles covering the exposure model and economics, discovery and sensitivity, sharing and guests, OAuth and data flows, tenant baselines, remediation campaigns, continuous monitoring, and metrics and ownership - as Rania Haddad, SaaS security program lead at Strathmore Associates, building one programme pack across a twenty-week case.

18 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Score SaaS exposure as sensitivity x reach x persistence across six tenants, price remediation including breakage, and set a reproducible baseline Exposure Index and target.
Measure sensitivity with labels, exact data match, trainable classifiers and stratified sampling, and give every sensitive container an accountable owner.
Reduce link, guest and OAuth exposure on usage and sign-in evidence, govern consent and data flows, and provide governed client-collaboration paths.
Set CIS-aligned tenant baselines with container labels, conditional access, DLP and SSPM drift detection so reduced exposure stays reduced.

Price:৳12,000