Category
Keeping your org aligned with IT compliance requirements and audit expectations.
salesforce · security · tools · compliance
Summer '26 moves Salesforce Data Mask & Seed on-core with automated PII detection. Here's why unmasked sandbox data is a real compliance risk — and how to fix it.
Scott Covert ·
salesforce · security · compliance · tools
Salesforce's phishing-resistant MFA hits July 1, but you don't need a YubiKey. A FIDO2 passkey in 1Password qualifies—a stored TOTP code doesn't. Here's the right setup.
Scott Covert ·
salesforce · security · compliance
The Security Benchmark for Salesforce (SBS) is an open-source, vendor-neutral compliance standard that defines prescriptive, auditable security controls across eleven domains specific to the Salesforce platform. Unlike generic frameworks such as NIST or ISO 27001, SBS translates abstract security principles into testable Salesforce requirements with built-in regulatory mappings for HIPAA, GDPR, SOC 2, and more.
Scott Covert ·
salesforce · security · compliance · appexchange
Salesforce has issued its most aggressive security roadmap yet, starting with a mandatory May 11 deadline for ISVs to implement four critical OAuth controls to prevent credential exfiltration. The overhaul continues through July for admins, introducing mandatory phishing-resistant MFA and step-up authentication for report exports to harden orgs against modern breach vectors.
Scott Covert ·
ai · salesforce · security · compliance
Salesforce uses your org's data to train AI models by default. A new Setup toggle lets you opt out, but Slack requires a manual email Here's how to disable both.
Scott Covert ·
compliance · security · tools
Native Salesforce auditing tools often fall short of the rigorous demands imposed by SOX, HIPAA, and SOC 2. While configuration changes and logins are tracked by default, critical blind spots remain; specifically regarding record-level read access, restricted field history caps, and brief data retention windows that fail to meet multi-year regulatory requirements.
Scott Covert ·
compliance · permissions · salesforce · security · appexchange
Secure your Salesforce org: Use Org Overview dashboard to gain instant visibility into profiles, permission sets, and security risks—all in one place.
Andrew Chen ·
