Procurement and Implementation of SaaS Services : Challenges Related to Information Security and Data Protection from a Product Owner's Perspective
Laine, Meri (2025)
2025
All rights reserved. This publication is copyrighted. You may download, display and print it for Your own personal use. Commercial use is prohibited.
Julkaisun pysyvä osoite on
https://urn.fi/URN:NBN:fi:amk-2025062523465
https://urn.fi/URN:NBN:fi:amk-2025062523465
Tiivistelmä
The purpose of the thesis was to highlight the challenges related to the procurement and implementation of SaaS services and licenses from the perspective of a Product Owner. The focus was particularly on challenges related to information security and data protection. The goal was to identify key areas for improvement within the target organization through concrete observations.
The methodology involved a diary-based study, recording observations and experiences over a ten-week period. The data included personal observations, statements from Security Unit experts, and internal organizational documents and process descriptions. The diary entries were summarized into key findings and development suggestions.
The results indicated that the SaaS service procurement process is complex, and meeting information security and data protection requirements is challenging. Key development ideas included clarifying processes and documentation, refining roles and responsibilities, and improving collaboration among various stakeholders. The findings of the thesis can be applied in the workplace, particularly in public sector organizations, which can utilize the development suggestions to enhance their procurement processes and information security practices.
The methodology involved a diary-based study, recording observations and experiences over a ten-week period. The data included personal observations, statements from Security Unit experts, and internal organizational documents and process descriptions. The diary entries were summarized into key findings and development suggestions.
The results indicated that the SaaS service procurement process is complex, and meeting information security and data protection requirements is challenging. Key development ideas included clarifying processes and documentation, refining roles and responsibilities, and improving collaboration among various stakeholders. The findings of the thesis can be applied in the workplace, particularly in public sector organizations, which can utilize the development suggestions to enhance their procurement processes and information security practices.