Tag
vendor-risk
Articles tagged with vendor-risk.
best-practices
What Should Your Security Page Say About Login?
What a SaaS security page should say about login: SSO, MFA, sessions, audit logs and offboarding, plus the claims to…
best-practices
Who Answers Security Questionnaires at a 50-Person SaaS?
Who owns security questionnaire answers at a small SaaS, how to build a reusable answer library, and where security questionnaire…
best-practices
A Decision Memo for Replacing Your Identity Provider
A fill-in decision memo template for replacing your identity provider: situation, options, cost, risk, timeline and the decision you need,…
Articles
Why SSO Alone Won't Pass a Vendor Security Review
SSO answers one line of a vendor security review. What reviewers also check: enforced SSO, deprovisioning, sessions, audit logs, and…
best-practices
What Vendor Security Questionnaires Ask About Login
Login is one of the biggest sections of a vendor security questionnaire. What the SSO, MFA, access review, audit log…
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.