Secure provides a detailed analysis of your Salesforce security, going beyond the basic Salesforce Health Check. With Secure, administrators gain the ability to align security settings with industry best practices and organizational InfoSec policies, ensuring robust protection of sensitive data.
- Secure enables a Salesforce Administrator to:
- Perform Data Classification by assigning default or custom levels and categories to all fields within the org and view real time data classification progress.
- Rapidly review your overall security posture within Salesforce.
- Compare existing security settings against recommended best practices.
- Gain insights on how to improve your security posture by making configuration updates within Salesforce.
- See which Salesforce users, profiles, permission sets, and permission set groups have what levels of access to objects and fields, as well as a separate view for System Permissions.
- Connect multiple Salesforce orgs and report on key security statistics within each one.
- Select encryption wish list fields and run an analysis against them, allowing you to see if they comply with or go against the Salesforce rules for encryption at the platform level.
- Review and compare the platform encryption analysis results against each field’s data classification level. This helps determine the next steps for each of the fields.
- Schedule analysis and snapshots on a daily, weekly, or monthly basis.
- Estimate field usage to drive security tech debt prioritization decisions.
- Encrypt fields using Salesforce Shield Platform Encryption directly from within the Platform Encryption Analyzer tab.
- Receive customized alerts based on key security findings.
- View and update your Salesforce org’s history retention policies within Salesforce Shield Field Audit Trail.
- View and update field history tracking in a centralized place against each field’s data classification level.
- View history changes on tracked fields at the record level in several ways, including Over Time, By Field, or By User.
- Export views and results to a CSV file for review outside of Secure, or to retain the data for future reporting needs.
- Secure supports the use of keyboard navigation for all of its features.
Secure Permission Sets
Secure has permission sets that assign users different levels of access to tabs and functionality. To assign permissions, add any of the permission sets below to a user account:
- Own Secure Access Manager: Grants access to the Who Sees What tab.
- Own Secure Policy Manager: Manage policies within Own Secure, including dismissing results in Security Insights.
- Own Secure Super User: Provides full access to all Own Secure tabs and features.
- Own Secure Field Audit Trail User: Grants access to both the History Retention Policy Manager and Field History Explorer tabs.
- Own Secure Field Audit Trail User - Field History Explorer: Grants access to the Field History Explorer tab.
- Own Secure Field Audit Trail User - History Retention Policy Manager: Grants access to the History Retention Policy Manager tab.
- Own Secure Reporting Manager: Grants access to the Reporting tab.
- Own Secure Security Insights Manager: Grants access to the Security Insights tab.
- Own Secure for Shield - View Data Classification Tab: Allows access to view the Data Classification tab.
- Own Secure for Shield - View Platform Encryption Analysis Tab: Allows access to view the Platform Encryption Analyzer tab.
- Own Secure for Shield - Data Classifier: Grants the ability to apply Data Classification levels to fields.
- Own Secure for Shield - Modify Settings: Grants the ability to modify all options on the Settings tab.
- Own Secure for Shield - Platform Encryption Analyst: Grants the ability to run an analysis on the Platform Encryption Analyzer tab.
Secure Feature Tabs
Secure's features are located across eight tabs:
- Security Insights: Analyzes and provides risk scores for an org's Salesforce security posture, highlighting potentially risky configurations.
- Data Classification: Provides the ability to classify fields within an org to identify sensitive information that requires protection, based on regulatory or security policies.
- Platform Encryption Analyzer: Provides a detailed analysis on which fields can be encrypted, states why they can or cannot be encrypted, and displays the current encryption status for them.
- Who Sees What Explorer: Displays detailed information about the security posture of the org from both a data access and permissions perspective.
- History Retention Policy Manager: Provides an interface which summarizes data classification and field tracking information to enable the configuration of field change history retention.
- Field History Explorer: Displays the change history for a specified field if tracking is enabled.
- Reporting: Provides Progress, Compliance, and Stack Ranking reports to aid in org administration.
- Settings: Contains the configuration options for Secure.