Survey says Software as a Service model opens up risks