Security 101 for SaaS startups

Re:Security 101 for SaaS startups by twakefield on Tuesday March 07, 2017 @07:49PM (#13816800)

"Once your sales starts selling to large customers, they would report back on compliance requirements and certifications related to security."

And get ready for the questionnaires, each different enough to maximize the time spent on them. The Vendor Security Alliance[0] is attempting to standardize them. Although, I'm not sure how much uptake it's getting. At a minimum, it's a good example of a typical questionnaire.

[0] https://www.vendorsecurityalliance.org/

[ Parent | on HN ]

Re:Security 101 for SaaS startups by ryanmarsh on Tuesday March 07, 2017 @08:00PM (#13816871)

I don't see how any small company could provide a sufficient response that questionnaire at a reasonable cost in a reasonable amount of time. I'm not saying security isn't important. Just that looks like a lot of money down the drains.

[ Parent | on HN ]

Re:Security 101 for SaaS startups by intrasight on Tuesday March 07, 2017 @08:25PM (#13816987)

First, with modern SaaS platforms, it's not that hard to do security right. Seconds, it's not like you can say "no, I'm not going to fill out your questionare".

[ Parent | on HN ]