In Salesforce we have several monitoring tools and techniques for us to monitor activities in a stressful
arc and the several tech tools and techniques that are available to us.
Are security Health Check System Overview storage usage debug logs jobs album messages time workflows
and AP usage notifications in this video.
We are going to discuss about the first one that is a security check the security health check just
like how we do our medical health check to ensure that we are in good body condition.
As a senior admin we should do the security health check.
We should monitor the report on a periodic basis to ensure that we do not run into any risk.
So how do we access this.
Hey check report.
Go to your dev look Rob search for health check under security controls.
You will have health check.
Go for that report.
You can see that this health check report it is auto generated video and request that it is automatically
generated for your sales force.
So ask the senior admin.
It is our responsibility to see the zoo report and ensure that we identify and fix any potential vulnerabilities
in the settings.
So basically this health check is based on sales force baseline standard.
So what does the same skills base baseline standard sensible baseline standard comprises of all these
security settings out here.
The high risk security settings medium risk security settings low risk security settings and informational
security settings.
All these settings with their default parameters they are set up in this Salesforce baseline standard
and you can very much download this sales calls baseline standard you have this export baseline option
you can download that automatically good downloaded and simplified you can view that file also
and if you want to make any changes you can make changes to this and upload your custom baseline so
here you also see that option of importing baseline so you can export back make your changes create
a you will fly and import that as your custom baseline but always remember one thing.
The less restrictive your settings are the less quarter it is going to be alright.
So what if you'll see in high security in high risk security settings see as full size guard in different
settings available and in medium risk different set of settings in low risk different set of settings
and an information security settings.
They have some settings available and for every setting that is available Salesforce has got a standard
value that does any.
And here it gives your value that is good to see.
All right.
So be sure that our value aligns with the standard value that is set by SAS force and all the settings
that are available out here.
It comes under a particular group mostly.
There are some fortify groups available out here say them.
The majority ones are the session settings.
Majority of the settings all fall under this category.
Then password policy is a second one certificate and key management 3 file upload and download security
4 and then log in Axis 5 a remote site.
Six certificate and key management Senate.
So basically like all the security settings are grouped in one among these seven settings.
And as I mentioned before every setting has got a standard value holding and it also displays what other
values.
And for every setting it also displays the status.
It is critical right because like the standard values enabled but our values are disabled right.
So if you're saying you deserve critical risk that we have here does a higher risk security setting
basically.
So for every setting that is a status which says whether we are compliant with that particular setting
or if there is any warning order for this critical so as it suggest complaint means we are not valid
complaint with what the standard setting is wanting.
Yes we are not complaint how I would've discounted it as a warning and critical means it has to be addressed
immediately.
And here we have the options.
You can edit and you can edit your settings accordingly.
So there are a good number of settings out here.
As a senior admin it just very very much recommended that we have an idea about what these settings
are and we feel that all of this complaint with these settings and if the order of is not complaint
with the settings check it out see like why we have a different setting available and how good is affecting
the school idea.
When you talk about the school we should be aware about the range.
So this good if it does 90 percent and of all it means excellent.
We have got very good security settings set in the sales force of 80 to eighty nine it's considered
very good.
Still 70 to seventy nine is good.
Fifty five to sixty nine is poor.
It needs immediate attention and 54 and below is very poor.
So always ensure that you are to say as follows OG has got a good score based on these security settings
and the recommended actions from said schools is that basically if that ordered school is 0 to 33 percent
they say that to handle all year high risk security settings immediately and at 34 to 66 is to handle
the highest settings immediately and the medium risk also plan to handle them in the long run and the
total score to 67 to 100 percent they say like it is pretty good.
So as a senior and when it is irresponsible for us to do a hand check report to monitor this on a regular
fashion so that you know we encounter.
You do not in cold any higher risk assessments.
Perfect.
So the other concept that I would like to discuss with you here is about depth settings.
As I mentioned before there are various settings available and all the settings come on data.
Particular group right CSA for example session settings it has guard like various settings available
up here so to more know more about the session settings go for session settings.
And here you have all the settings available out here and obviously there are only so many settings
out here.
It may not be possible for us to have a very good knowledge and all this but at least what I would say
is not all of these session settings but at least those session settings which are listed out here.
It would be great if you know what those settings are.
So Salesforce always offers the salesforce help page so if you go to the Salesforce help page automatically
make it give you the details of what that page.
So when you go to session settings it detail you like what those settings are and what is that importance
of that particular setting let's consider the first one that does enable click Jack protection for a
customer.
We should have those pages with standard had us
so go for the salesforce help page
all right.
So here it is.
So this is the setting.
And here is their description for that setting.
So as I mentioned before even if we do not go through all the session settings at least if you have
a good understanding of those which are listed out here we can very much use the sales help bait.
You can get an understanding of what those settings that lead them then begin my does it take a call
on liquid that we have to enable or disable it which is good for who you are and how good is affecting
the school.
Similarly password policies the maximum invalid log atom Sten the standard value is three let's log
in that is a one year old ordering because it says fills up I recommend this to have three so that you
can have better security with regards to the user's password similarly check out these other settings
as well here the password policies and what these settings are
and generally annual sales for dogs they have the initials good less than hundred percent and we can
use those help check it to quickly improve the school how how do we improve that we can eliminate the
high risk in the password policies and the other less secure setting groups by doing that we can improve
the school also then let's say schools introduces a new settings to the Social Security health check
they are added to the security that stands for baseline standard they are added to the Safe Schools
baseline standard by default and in case you are the you have a custom baseline then then you use it
you are prompted to add that new settings whenever you open your custom baseline and by using custom
baseline I do know that you can import up to five custom baselines to compare all the security settings
with your own standard set monitor the health check on a periodic basis ensure the security settings
are aligned with the sales for standard value and you can use this edit action to edit any of the settings
you can also use this a six risk button to update the settings you can see that once you click the fix
it s button it will automatically pop up a page that all the settings which needs attention so you can
updated accordingly
you can select those that you want to update and then you can give change settings so this is all about
health check and as you see it is definitely a very efficient tool to help us monitor our access for
Soc.