As part of the enterprise paper we are working on, I have been thinking about (and discussing) the impact of SaaS on IT Governance. Clearly, the way software gets evaluated has to change, Phil has a good list on what to look for when selecting a SaaS