2025针对中型企业的SaaS AI风险调查报告 (2).pdfVIP

SaaSAI-RiskforMid-

MarketOrganizations

2025SurveyReport

©2025CloudSecurityAlliance–AllRightsReserved.Youmaydownload,store,displayonyour

computer,view,print,andlinktotheCloudSecurityAllianceat

subjecttothefollowing:(a)thedraftmaybeusedsolelyforyourpersonal,informational,non-

commercialuse;(b)thedraftmaynotbemodifiedoralteredinanyway;(c)thedraftmaynotbe

redistributed;and(d)thetrademark,copyrightorothernoticesmaynotberemoved.Youmayquote

portionsofthedraftaspermittedbytheFairUseprovisionsoftheUnitedStatesCopyrightAct,

providedthatyouattributetheportionstotheCloudSecurityAlliance.

©Copyright2025,CloudSecurityAlliance.Allrightsreserved.2

Acknowledgments

LeadAuthor

HillaryBaron

Contributors

JoshBuker

MarinaBregkou

RyanGifford

SeanHeide

AlexKaluza

JohnYeoh

GraphicDesign

ClaireLehnert

StephenLumpe

SpecialThanks

RanSenderovitzandBrianFravel

AbouttheSponsor

WingSecurityisdedicatedtoprotectingorganizationsfrom

SaaS-relatedthreats.WithcomprehensiveSaaSSecurity

PostureManagement(SSPM)andIdentityThreatDetection

andResponse(ITDR),Wing’splatformprovidescontinuous

visibilityandcontrolovercriticalapps,SaaSconfigurations,

andapp-to-appconnectivity.DesignedtosimplifySaaS

securitymanagement,Wingequipssecurityteamswithessentialcontextandflexibleremediation

capabilitiestoaddressSaaSriskseffectively,ensuringsmoothbusinessoperationsandcontinuity.

https://wing.security/

©Copyright2025,CloudSecurityAlliance.Allrightsreserved.3

TableofContents

Acknowledgments3

ExecutiveSummary5

KeyFindingsataGlance5

KeyFindings6

KeyFinding1:SecurityTeamsAreStrugglingwithaGrowingAttackSurface

andTrackingApplicationUse6

KeyFinding2:Mid-Mark