Systems and methods for verifying and enforcing cybersecurity control policies across SaaS platforms

A method for enforcing control policies on software as a service (SaaS) platforms, the method being implemented via execution of computing instructions configured to run at one or more processors and configured to be stored on at least one non-transitory storage device, the method comprising:

• providing access to a security control platform over the network, the security control platform being configured to execute functions associated with creating and enforcing control policies on accounts provided by a plurality of SaaS platforms;
• integrating the accounts provided by each of the plurality of SaaS platforms with the security control platform;
• generating, using the security control platform, control policies to be enforced on the accounts provided by the plurality of SaaS platforms;
• providing, by the security control platform, interfaces that enable users to define the control policies, wherein the interfaces enable the following control policies to be defined:
• a first control policy configured to control expirations of files that are shared using one or more of the accounts provided by the plurality of SaaS platforms;
• a second control policy configured to prohibit files from being shared with one or more specified users using one or more of the accounts provided by the plurality of SaaS platforms;
• a third control policy configured to control sharing of files with public privileges using one or more of the accounts provided by the plurality of SaaS platforms;
• a fourth control policy configured to control sharing of inactive files using one or more of the accounts provided by the plurality of SaaS platforms;
• a fifth control policy configured to control sharing of files with users or accounts that do not utilize multi-factor authentication using one or more of the accounts provided by the plurality of SaaS platforms;
• and
• a sixth control policy configured to implement data retention rules on files associated with one or more of the accounts provided by the plurality of SaaS platforms;
• monitoring, using the security control platform, activity events generated by each of the accounts integrated with the security control platform;
• and
• transmitting, using the security control platform, commands over the network to the plurality of SaaS platforms, wherein the commands are configured to enforce the control policies on the accounts integrated with the security control platform and at least a portion of the commands are transmitted in response to the activity events monitored by the security control platform.

A computer program product for enforcing control policies on software as a service (SaaS) platforms, the computer program product comprising a non-transitory computer-readable medium including instructions for causing one or more computer devices to:

• provide access to a security control platform over a network, the security control platform being configured to execute functions associated with creating and enforcing control policies on accounts provided by a plurality of SaaS platforms;
• integrate the accounts provided by each of the plurality of SaaS platforms with the security control platform;
• generate, using the security control platform, control policies to be enforced on the accounts provided by the plurality of SaaS platforms, wherein the security control platform provides interfaces that enable users to define the control policies, and the interfaces enable the following control policies to be defined:
• a first control policy configured to control expirations of files that are shared using one or more of the accounts provided by the plurality of SaaS platforms;
• a second control policy configured to prohibit files from being shared with one or more specified users using one or more of the accounts provided by the plurality of SaaS platforms;
• a third control policy configured to control sharing of files with public privileges using one or more of the accounts provided by the plurality of SaaS platforms;
• a fourth control policy configured to control sharing of inactive files using one or more of the accounts provided by the plurality of SaaS platforms;
• a fifth control policy configured to control sharing of files with users or accounts that do not utilize multi-factor authentication using one or more of the accounts provided by the plurality of SaaS platforms;
• and
• a sixth control policy configured to implement data retention rules on files associated with one or more of the accounts provided by the plurality of SaaS platforms;
• monitor, using the security control platform, activity events generated by each of the accounts integrated with the security control platform;
• and
• transmit, using the security control platform, commands over the network to the plurality of SaaS platforms, wherein the commands are configured to enforce the control policies on the accounts integrated with the security control platform and at least a portion of the commands are transmitted in response to the activity events monitored by the security control platform.