Who is responsible for the security settings of a sanctioned SaaS application?
1) provider
2) IT department
3) line of business that uses it
4) users