Unfortunately, Google, Salesforce, Box etc. aren't accountable for the security posture of your organization or its employees. Enter the shared responsibility model. Companies are responsible for employee activities & data, even in
71% of security decision makers say they understand their accountability for SaaS security, but this figure diminishes significantly when specific aspects such as liability and division of responsibilities are dissected.