Sophos SaaS risk profile covering identity, configuration, data exposure and supply-chain risk. Independent, neutral analysis.