TL;DR; Salesforce customers that are APRA regulated need to focus on their Salesforce environment to be compliant with APRA’s CPS234 as APRA found that there were major failings in compliance in a recent survey. Salesforce and partners have products and services to assist with this. Introduction The Australian Prudential Regulation Authority (APRA)…

If you use Salesforce Aura Communities then there is an issue that can let users see data that they possibly should not see. Sometimes, due to a misconfiguration by the Salesforce Administrator, the user can see ALL the Contact records in the system. There is a workaround for this and…

An article published today (20 April 2023) by the United States Cybersecurity and Infrastructure Security Agency, the United States National Security Agency, the United States Federal Bureau of Investigation, the United Kingdom National Cyber Security Centre, the Australian Cyber Security Centre, the Canadian Centre for Cyber Security, and the New…

TL;DR; Salesforce’s new licence is designed just for API users and at the low cost (5 free and only US$120/year for another licence) it will allow customers to stop sharing a user licence with APIs thereby making things more secure. At Trailblazer DX 23, Salesforce announced that all customers with…

Using the System Admin profile for an integration is very dangerous as you have given the other system complete read, write, create and delete capabilities for your entire system — all data and attachments/files. I have seen too many times that people take the easy route to integration with Salesforce…

If you are at all interested in security and are based in Australia (or anywhere for that matter), the Australian Government’s Cyber Security Centre, the ACSC, have created the Essential Eight — eight essential threat mitigation strategies as baseline settings for every business. …

TL; DR; (Too Long — Didn’t Read) There is a lot of security content regarding Salesforce’s products and services available at https://compliance.salesforce.com, however for a quick overview of Salesforce’s security stance have a look at the Salesforce Security Privacy ARChitecture (otherwise known as SPARC) docs at https://bit.ly/SFDC_SPARC. These are publicly available (no login required) and make up…

TL;DR This article explains the 5 things you need to know about your Salesforce Data to be sure it is safe and the risks to your business if you do not know them… Listening to a podcast featuring my ex-colleague Jay Hira, I learned about the 5 Knows of Cybersecurity…