1: Identify a low-penalty area of the business to serve as your first SaaS project
2: Assess your risk
3: Choose vendors carefully
4: Do a deep dive on your SaaS vendor’s security infrastructure and approach
5: Ask how your vendor handles disaster recovery
6: Get it in writing
7: Get chummy with your vendors
8: Look out for new monitoring tools
9: Consider the help of a security consultant
10: Devise a PR and response strategy
via techrepublic