TL;DR

 

  1. Yet another Facebook breach gives hackers access to full account details.

 

  1. Different mechanism, but similar outcome: G Suite users and admins should realize that users signing into applications via the extremely popular Connect with Google button gives those web apps access to corporate data — often full access to email contents, calendars, contacts, and more.

 

  1. Alpin shows a list of apps with dangerous access, and allows you to blacklist them in 1 click.

 

It’s an interesting time to be a vendor manager. The number of vendors, often SaaS providers, continues to grow.

 

And much of that growth is shadow IT, where department heads or front-line employees are managing those SaaS relationships — if you can call signing up and setting up credit card auto-renewal “managing.”

 

“SaaS vendor management” has sometimes meant “crowdsourced vendor management.”

 

Why is that? As we’ve seen from research from Gartner and others, even CIOs have little clue just how much shadow IT exists at their own companies.

 

A CIO’s reaction when Alpin revealed 10x more cloud apps than they anticipated.

 

Firms have also been permissive of departments seeking out their own solutions, keeping themselves agile.

 

The reaction to that permissive attitude has begun. And whenever the next recession or correction hits, we should expect the pace to increase quickly, as the focus turns to rapid-fire cost-cutting initiatives.

 

And what will help SaaS vendor managers face this challenge? Ironically, more SaaS. But it only takes 1 app to bring order to the chaos.