SaaS Inventory & Access Review Worksheet

Use this worksheet to capture your SaaS landscape, assign ownership, and reduce security and cost risk. Start with what you know, then expand using subscription/bank statement review, your SSO app list, and department input. Treat this as a living document.

Part A: SaaS Inventory

Tool / Vendor	Purpose	Tier (1/2/3)	Owner	Billing (Monthly/Annual)	Seats Paid	Seats Used	Notes

Part B: Access & Security Controls

SSO Enabled?	MFA Enforced?	Logs/Auditing Enabled?	Data Sensitivity
Yes/No	Yes/No	Yes/No	Low/Med/High
Yes/No	Yes/No	Yes/No	Low/Med/High
Yes/No	Yes/No	Yes/No	Low/Med/High
Yes/No	Yes/No	Yes/No	Low/Med/High

Part C: Quarterly Review Routine

Review seats used vs seats paid for all Tier 1 and Tier 2 tools.
Confirm MFA and SSO are still enforced; remove legacy authentication where possible.
Review admin roles and remove unused elevated access.
Check for new tools purchased without approval (subscription scan).
Confirm offboarding steps include removing access from all listed tools.
Retire or consolidate redundant tools and migrate data intentionally.

Tip: Prioritise tools that handle money (accounting, payroll), identity (email/admin portals), and customer data (CRM, file platforms). These have the highest business impact.

👉 Book your free consultation today
📧 hello@virtusgroup.biz
🌐 virtusgroup.co.nz
📞 0800 847 887 (VIRTUS)