Securing Vector's estate of 86 SaaS applications: a fenced estate of app tiles entered through one front door of single sign-on with FIDO2 multi-factor authentication and SCIM provisioning, 80 apps now behind SSO and six still on local login; a consent-phishing OAuth app requesting mail access is blocked at the fence, and an account takeover is contained in 25 seconds by revoking sessions and tokens. On the right, the eight domains before and after: 74 shadow apps found and all 86 given owners, SSO from 14 apps to 80, admins from 140 to 22, 37 critical misconfigurations with drift now at zero, 61 public shares of sensitive data blocked, 53 over-scoped OAuth grants removed, audit logging from 18 apps to 78 sent to the SIEM, and data processing agreements from 9 to all 22 regulated apps.

CY-MID-016Mid Level · SaaS Security Posture Management

SaaS Security Posture Management — The SaaS Estate

A hands-on mid-level course that secures the sprawling estate of SaaS applications an organization runs, where most of its data and identity now live. Work the SaaS estate - eight domains: Discovery, Identity & SSO, Access, Configuration, Data & Sharing, Integrations & OAuth, Monitoring, and Vendor & Compliance - securing the customer side of the shared responsibility, with real SaaS discovery, SSO/MFA and SCIM, least-privilege, SSPM misconfiguration checks, external-sharing control, OAuth governance, and audit-log monitoring. Four hands-on activities in every lesson.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Discover the whole SaaS estate, including shadow SaaS, and inventory and risk-rank it.
Centralize identity behind SSO with strong MFA and SCIM, and enforce least privilege.
Harden configurations with SSPM and control data and external sharing.
Govern OAuth integrations, monitor for account takeover, and manage vendor risk and offboarding.

Price:৳8,000