ARL Logo
Risky Thinking
On Risk Management, Business Continuity, and Security
17 January, 2018
Does everyone remember the plan?
It's a problem.

The Risks of SaaS (Software as a Service)

Google decides to teach its users about vendor risk the hard way...

It looks like reality is finally destroying some of the software developers’ Utopia that was Google.

Along with the recently announced layoffs, we learn that a number of Google services are being axed, including Google Video.

It’s a reminder that a significant risk of Software as a Service (SaaS) is supplier viability.

While reliability may be an issue (for example, has had some well publicized outages), it’s important remember that a SaaS supplier’s reliability must be compared with the potential reliability of services from the company’s own in-house IT department. Often it is simply be too costly to provide the same degree of availability, support, and redundancy that a SaaS supplier could provide.

However, loss of a SaaS supplier is a more serious risk. If a software supplier fails, you can protect yourself with a software escrow agreement and continue as usual until software or hardware changes force the application to be replaced.

But if a SaaS vendor fails, even if you had a software escrow agreement and kept your own backups, could you replicate the necessary features of their data center in the necessary amount of time?

It is supplier viability as much as supplier reliability that is the risk with using Software as a Service.

Better check their books as well as their business continuity plan.

Michael Z. Bell
February, 2009

Want to know when new articles are available? Subscribe to the Risky Thinking Newsletter and keep up to date. It's free for people working in business continuity, disaster recovery, or risk management.

[ Back To Top ]

Note. Where trademarks are mentioned, they belong to their respective owners.

© Albion Research Ltd. 2018