Threats - salesforce.com - 0 views
-
Security Best Practices Webinar for All Salesforce.com Customers
-
Designate a security contact within your organization so that salesforce.com can more effectively communicate with you
-
Consider using other two-factor authentication techniques
- ...14 more annotations...
-
activate IP range restrictions
-
Implement IP Restrictions in Salesforce.com
-
Two-Factor Authentication
-
second-level authorization, including requiring secure IT tokens
-
does not protect against “man-in-the-middle” attacks, where messages are intercepted
-
applications that may be integrated with salesforce.com are not protected by two-factor authentication
-
Strengthen Password Policies
-
salesforce.com password policies: - password expiry period - password history (reuse) enforcement - minimum password length - password complexity requirement - forgotten password hint question requirement
-
-
Require Secure Sessions
-
mandating that all sessions are encrypted and secure
-
Decrease Session Timeout Thresholds
-
Identify a Primary Security Contact
-
identify a person in your company who is responsible for application security
-
should have a thorough understanding of your security policies
-
single point of contact for salesforce.com