Servicenow security assesment

I am doing a servicenow gateway saas instance security assesment for a client. I am new to saas assesment. Any idea where to start. What questions to ask and proceed? Any links, tranings, etc will be very useful. Thanks a lot