--- schema_version: "1" id: 215647c642c26ac922e2c65b463cf2e8d6ffd0b9a692c6ad82a62ff328f269f3 title: SecurityHealthCheckRisks collection: legacydeveloper version: current locale: en-us portal_url: https://docs.salesforce.com/legacydeveloper/current/en-us/api_tooling/tooling_api_objects_securityhealthcheckrisks.md canonical_url: https://developer.salesforce.com/docs/atlas.en-us.api_tooling.meta/api_tooling/tooling_api_objects_securityhealthcheckrisks.htm source_site: developer.salesforce.com content_type: documentation content_hash: 01d03193392805a11f2e1d4fa75cd03a85023831b131352e510e764394afc4f2 description: Represents your org’s security setting values, risks, and Salesforce-recommended setting values. Only users with the "View Setup and Configuration" user permission can retrieve data from this object. Available in Tooling API version 37.0 and later. --- # SecurityHealthCheckRisks Represents your org’s security setting values, risks, and Salesforce-recommended setting values. Only users with the "View Setup and Configuration" user permission can retrieve data from this object. Available in Tooling API version 37.0 and later. ## Supported SOAP Calls query() ## Supported REST HTTP Methods GET ## Fields | Field | Details | | --- | --- | | DurableId | Type string Properties Filter, Group, Nillable, Sort Description Unique identifier for the field. Always retrieve this value before using it, as the value isn’t guaranteed to stay the same from one release to the next. To simplify queries, use this field. | | OrgValue | Type string Properties Filter, Nillable, Sort Description The org’s value for the security setting. | | OrgValueRaw | Type string Properties Filter, Nillable, Sort Description The org’s value for the security setting as it is stored in the database, usually without units of measure or extra text. For example, if the Minimum Password Length setting’s OrgValue is 8 characters, the OrgValueRaw is 8. | | RiskType | Type picklist Properties Filter, Group, Nillable, Restricted picklist, Sort Description The level of risk of the org’s security setting value. Valid values are: - HIGH\_RISK - MEDIUM\_RISK - MEETS\_STANDARD | | SecurityHealthCheckId | Type string Properties Filter, Group, Nillable, Sort Description The ID of the Health Check score record associated with this field. | | Setting | Type string Properties Filter, Group, Nillable, Sort Description The name of the security setting. For example, Minimum password length. | | SettingGroup | Type string Properties Filter, Group, Nillable, Sort Description The name of the security setting group in which the setting resides in the Setup tree. For example, Password Policies. | | SettingRiskCategory | Type picklist Properties Filter, Group, Nillable, Restricted picklist, Sort Description The level of risk of the org’s security settings. Available in version 40.0 and later. Valid values are: - HIGH\_RISK - MEDIUM\_RISK - LOW\_RISK - INFORMATIONAL | | StandardValue | Type string Properties Filter, Nillable, Sort Description Salesforce-recommended standard value for the security setting. | | StandardValueRaw | Type string Properties Filter, Nillable, Sort Description Salesforce-recommended standard value for the security setting as it is stored in the database, usually without units of measure or extra text. For example, if the Minimum Password Length setting’s StandardValue is 8 characters, the StandardValueRaw is 8. | ## Usage Use this object to query your org’s security setting values, risks, and Salesforce-recommended setting values. Reading security settings and their security status is useful if you have multiple Salesforce applications that require consistency and compliance in their security posture. This query gets a list of your org’s high risk settings. SELECT RiskType, Setting, SettingGroup, OrgValue, StandardValue FROM SecurityHealthCheckRisks where RiskType=’HIGH\_RISK’ This query gets your org’s Health Check score and a list of your org’s high risk settings. SELECT Score, (SELECT RiskType, Setting, SettingGroup, OrgValue, StandardValue FROM SecurityHealthCheckRisks where RiskType=’HIGH\_RISK’) FROM SecurityHealthCheck This query gets your org’s Health Check score and the security settings that meet the Salesforce baseline standard. SELECT Score, (SELECT RiskType, Setting, SettingGroup, OrgValue, StandardValue FROM SecurityHealthCheckRisks where RiskType=’MEETS\_STANDARD’) FROM SecurityHealthCheck This query lists all the values in the Salesforce baseline standard. SELECT Setting, SettingGroup, StandardValue FROM SecurityHealthCheckRisks