Skip to content

Instantly share code, notes, and snippets.

@ashishsecdev

ashishsecdev/Salesforce_Security_Checklist

Last active October 26, 2022 17:48
Show Gist options
  • Save ashishsecdev/b490d924e0ff909c67f3dca199fe19c5 to your computer and use it in GitHub Desktop.
Save ashishsecdev/b490d924e0ff909c67f3dca199fe19c5 to your computer and use it in GitHub Desktop.
Download ZIP
Salesforce Security Checklist
Raw
Salesforce_Security_Checklist
Data Classification: Done?
Any compliances applicable? Yes, then which one?
Meeting the compliance requirements and standards?
Sensitive Data Classification?
Who has the access to what data?
Access Controls? What Roles, Profiles and Permissions?
Coding Standards?
Static Scanning of Code?
Data Loss Protection Enabled?
2FA/SSO Enabled?
Org, Object, Field and Record Level Controls?
Have you Documented the controls?
Business Geo Locations tied to Access? (Geo Fencing)
Audit Logs Enabled, what all?
Logs Onboarded in SIEM?
Key Management? Using vaults or how are you managing it?
Perform Salesforce Pentesting Assessment, Documentation? SAA filled and shared with Salesforce?
~Ashishsecdev (Ashish Bansal)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment