Cloud Protection

For many enterprise organizations, that map has a gap in it. And the gap is the CRM itself. Salesforce is one of the largest stores of personal data in most enterprise environments. Within it you have customer contact details, behavioral history, communic

Read the previous article Discovery and Governance answer different questions. Discovery asks: What trust relationships exist? What assumptions support them? Governance asks: Do we have sufficient and current visibility into the trust relationships that r

Before assumptions can be evaluated, risks considered, or governance decisions made, organizations first need visibility into the trust relationships within the workflow. This is the purpose of Trust Mapping Discovery. Read the previous article Discovery

1. Graham, what was different this year? The scale, mainly. Five years ago, security at Dreamforce meant a couple of Shield booths and not much else. This year, the Trailblazer Forest ran a hands-on security challenge for developers, and for the first tim

This raises an important question: If trust operates throughout a business workflow, how do we make it visible? The answer begins with the Trust Mapping Framework. Why mapping trust matters Salesforce business workflows rarely involve a single user intera

Identity and Access Management remains one of the most important foundations of Salesforce security, and these questions continue to be essential. But Salesforce has evolved. Modern Salesforce environments are no longer defined solely by human users inter

That invisibility is part of why the risk doesn't get taken seriously. It's also why the real cost is consistently underestimated. The absence of a visible incident isn't evidence that the risk is low. It's evidence that when incidents happen, the costs g

At this point, it is important to stress that there isn't just one kind of Salesforce risk. Someone accessing sensitive customer data is one risk, as is malware uploaded through a case attachment. A salesperson clicking a phishing link is another, while a

Key Takeaways Experience Cloud connects external audiences directly to your Salesforce data, so guest user configuration is a critical security boundary. Attackers have been exploiting misconfigured guest user profiles in a new campaign called City-Forum.

Key Takeaways Introduced support for the way your team handles Cloud Protection for Salesforce alerts via statuses. Log retention is no longer capped at 24 months. Set your own period per data type, or keep records indefinitely, without exporting anything