A Control-Driven Framework for Secure SaaS Onboarding in Regulated Enterprises

arXiv:2607.16543 · cs.CR, cs.CY, cs.SE · Submitted 2026-07-17 · Read on arXiv

cs.CR, cs.CY, cs.SE

Submitted: 2026-07-17

Updated: 2026-09-17

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

Alignment — 7× in this paper · explained in 1 episode
Failure Modes — 6× in this paper · explained in 3 episodes
Permit to Operate — 6× in this paper
Shared Responsibility Model — 6× in this paper
Third-Party Risk Management — 6× in this paper
Actor — 5× in this paper · explained in 3 episodes
Due Diligence Questionnaire — 4× in this paper
Accountability — 3× in this paper · explained in 2 episodes
Benchmark — 2× in this paper · explained in 2 episodes
Identity and Access Management — 2× in this paper
Office of the Comptroller of the Currency — 2× in this paper
Redundancy — 2× in this paper · explained in 2 episodes
Requirements Specification Document — 2× in this paper
Risk Assessment Questionnaire — 2× in this paper
Accuracy — 1× in this paper · explained in 1 episode
Artificial Intelligence — 1× in this paper
Continuous SaaS Security Posture Management — 1× in this paper
Core — 1× in this paper · explained in 2 episodes
Deferral — 1× in this paper · explained in 2 episodes
Digital Operational Resilience Act — 1× in this paper
Model Risk Management — 1× in this paper
Multi-Factor Authentication — 1× in this paper
Privileged Access Management — 1× in this paper
Provenance — 1× in this paper · explained in 3 episodes
Recovery Point Objectives — 1× in this paper
Recovery Time Objectives — 1× in this paper
Verification — 1× in this paper · explained in 2 episodes

Related papers