http://digitaljournal.i2p/tech-science/multi-cloud-doesnt-mean-clear-skies-ahead/article
A few SaaS applications have evolved good security controls over time, but they may be wildly different in quantity and degree (e.g., Office 365 has far more built-in controls than Dropbox).” Riley adds: “Unlike IaaS, where objects that are created are closed by default, the opposite is true with SaaS. For example, the default configuration of an Office 365 tenant is such that if users have access to a file, they can share that file with anyone in the world.