Software-as-a-Service (SaaS)  and Cloud Service Providers often need to meet and maintain minimum Information Security requirements to safeguard  user data and protect sensitive information.