{"id":63587,"date":"2023-02-14T16:45:26","date_gmt":"2023-02-14T08:45:26","guid":{"rendered":"https:\/\/version-2.com.sg\/?p=63580"},"modified":"2024-09-13T16:31:43","modified_gmt":"2024-09-13T08:31:43","slug":"salesforce-data-security-is-native-security-enough","status":"publish","type":"post","link":"https:\/\/version-2.com\/en\/2023\/02\/salesforce-data-security-is-native-security-enough\/","title":{"rendered":"Salesforce data security: is native security enough?"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

<\/p>

Salesforce is a dominant player in the Customer Relationship Management sector. Around 150,000 companies use Salesforce to manage customer data and launch marketing campaigns, and the company enjoys a 33% market share.<\/p>

It\u2019s easy to see why. Salesforce\u2019s cloud-based tools save costs and time, simplify customer analysis, and integrate smoothly with other SaaS services. But is Salesforce a secure environment to run your business?<\/p>

While Salesforce is generally safe to use, data security in Salesforce is still something users need to consider<\/strong>. Data breaches have exposed potential vulnerabilities. And users need to know how to use the Salesforce data security model when making their implementation more secure.<\/p>

Data security in Salesforce<\/h2>

Data security is the protection of sensitive data handled by an organization<\/strong>. In the context of Salesforce, this refers to customer records, including financial information and private personal details such as names and contact details.<\/p>

The consequences can be severe if an organization loses control of data privacy protection. According to IBM, the average cost of a data breach is approximately $4.35 million. Companies that lose large volumes of sensitive customer data can expect to pay hefty compensation.<\/p>

Salesforce is no exception<\/strong>. In 2019, Salesforce client Hanna Andersson suffered a major data breach<\/a>. A malware infection on the clothing retailer\u2019s Salesforce platform exposed over 200,000 customer accounts. Neither Hanna Andersson nor Salesforce knew anything about it.<\/p>

Three months after the Salesforce breach began, law enforcement officers discovered confidential data for sale on the Dark Web. Customers immediately sued under the California Consumer Privacy Act (CCPA)<\/a>.<\/p>

Salesforce and Hanna Andersson eventually settled the claim in 2021. Both companies accepted shortcomings in protecting user data, detecting malware, and informing customers. And they had to pay as much as $5,000 to affected customers.<\/p>

Related articles<\/p>

\u00a0<\/p>

\u00a0<\/div>
\u00a0<\/div>

\"Network<\/picture>

In Depth<\/span><\/p>

6 Network Access Control best practices<\/p>

29 Dec 2022\u2022<\/span>13 min read<\/span><\/p><\/div>

\u00a0<\/p>

\u00a0<\/div>
\u00a0<\/div>

\"SaaS<\/picture>

In Depth<\/span><\/p>

SaaS Security 101: The Definitive Guide<\/p>

10 May 2022\u2022<\/span>9 min read<\/span><\/p><\/div>

\u00a0<\/p><\/div><\/div>

The Hanna Andersson settlement shows that data security is a critical vulnerability<\/strong> and could happen to any Salesforce user. So let\u2019s dig deeper into the Salesforce data security model to explain how secure the platform is and what companies can do to protect their data.<\/p>

The Salesforce data security model<\/h2>

Since the 2019 Salesforce data breach, the platform has tightened up its native security features.<\/p>

Data at rest on Salesforce is encrypted, concealing it from outsiders. Logging systems allow users to track weaknesses and handle alerts. MFA adds strength to authentication processes. And users can even create bespoke protection for data analysis with the Data Mask feature.<\/p>

However, one set of controls in the data security field is all-important. Permission sets enable Salesforce users to manage data access. <\/strong>Users can use permission sets to ensure that only authorized users can access data. Everyone else is blocked by default \u2013 until they are granted necessary privileges.<\/p>

<\/p>

There are four Salesforce permission sets. Each one plays a role in locking down confidential customer information:<\/p>