c. The primary new risk with the above is that it’s no longer enough to secure the main SaaS services that are used in an organization. A more comprehensive security solution is necessary to overlook the plurality of the smaller SaaS services that usually have smaller security budgets, worse security practices, but still have access to sensitive organizational data.

Source: Cyber Talk