If a consultant wants to use a new third-party SaaS tool for a client engagement, how do you evaluate the security risk at Berkeley Research Group?
