Are you using Salesforce in the most secure way? Security is not a “set it and forget it” thing. We conduct Salesforce Security Risk Assessments for a number of clients and tend to see recurring themes that expose companies’ data. Here are the 7 most common mistakes we see with Salesforce Security:

RevCult continues to help companies in highly regulated industries (Financial Services, HLS, Consumer Goods, etc.) grow on the Salesforce platform while ensuring their data is properly protected. We are proud to offer more value to clients with our new Premium version of Field Audit Trial Cockpit, the User Interface for Salesforce Field Audit Trial.

Before we dive into the details of the Premium version, let's take a step back and provide some context on the importance of Field Audit Trail.

You might have seen an email from Salesforce with the subject "ACTION MAY BE REQUIRED: Field History data retention now enforced" and body text: 

In the Summer '18 release, Salesforce provided the option to encrypt certain fields with deterministic encryption scheme. Before we dive into the difference between probabilistic and deterministic encryption, let's make sure we're all on the same page.

Data security is a hot topic in today’s digital world with more sophisticated hackers, breaches, policies, requirements and private information moving to the cloud. Salesforce is one of the major cloud platforms companies are storing private information on, and as Salesforce Experts, we get asked a lot about the security of the platform.

Well Salesforce is just that – a platform, not a product. Salesforce does a great job of making their platform highly secure with fundamental security tools, BUT it’s a platform and you can still make mistakes on the platform that can increase your risk exposure.

This blog content was taken from our customer webinar "Is Salesforce CPQ Right for You?". Watch the webinar recording. 

Before we dig into the specifics, let’s quickly define CPQ:
Configure Price Quote (CPQ) software helps sales reps define and quote complex and configurable products/services with numerous and dynamic variables.

First, a little background

At RevCult, many of our clients work in highly secure and regulated industries (i.e. healthcare, financial services, etc.). With the close scrutiny involved with those industries comes an elevated focus on compliance and security. Almost all of our clients in those spaces have carefully defined and articulated data retention policies. When implementing a cloud solution, like Salesforce.com, to elevate your business and the processes that drive it, the platform often falls under the purview of Information Security teams. This is to ensure that the data stored within the platform adheres to the same standards as the rest of the IT systems.

Attending Dreamforce and interested in encryption? For those who have Salesforce Shield, or are just curious, here are 7 sessions you should definitely check out:

Hi Information Security professional,

Your organization has just acquired a great solution to encrypt the data stored within Salesforce - Shield Platform Encryption. Okay, so now what?

Now is the time to partner with your Salesforce Admin/Developer and help them understand what’s necessary to be secured from a regulatory/compliance perspective. But before you start, it's important to know where they're coming from. Their top priorities are: