1、2 Copyright 2025,Cloud Security Alliance.All rights reserved.2025 Cloud Security Alliance All Rights Reserved.You may download,store,display on your computer,view,print,and link to the Cloud Security Alliance at https:/cloudsecurityalliance.org subject to the following:(a)the draft may be used solel

2、y for your personal,informational,non-commercial use;(b)the draft may not be modified or altered in any way;(c)the draft may not be redistributed;and(d)the trademark,copyright or other notices may not be removed.You may quote portions of the draft as permitted by the Fair Use provisions of the Unite

3、d States Copyright Act,provided that you attribute the portions to the Cloud Security Alliance.3 Copyright 2025,Cloud Security Alliance.All rights reserved.AcknowledgmentsLead AuthorHillary BaronContributorsMarina BregkouJosh BukerRyan GiffordAlex KaluzaJohn YeohGraphic DesignClaire LehnertStephen L

4、umpeAbout the SponsorValence finds and fixes SaaS risks.The Valence platform discovers,protects,and defends SaaS applications by monitoring shadow IT,misconfigurations,and identity activities through unparalleled SaaS discovery,SSPM,and ITDR capabilities.Recent high-profile breaches highlight how de

5、centralized SaaS adoption creates significant security challenges.With Valence,security teams can control SaaS sprawl,protect their data,and detect suspicious activities from human and non-human identities.Valence goes beyond visibility by enabling security teams to remediate risks through one-click

6、 remediation,automated workflows,and business user collaboration.Trusted by leading organizations,Valence ensures secure SaaS adoption while mitigating todays most critical SaaS security risks.https:/4 Copyright 2025,Cloud Security Alliance.All rights reserved.Table of ContentsAcknowledgments.3Lead