Software as a service (SAAS) services featuring software for managing and monitoring information security risks