Similar Items: An investigation to determine incremental risks to software as a service from a user’s perspective