SSPM for Salesforce

Welcome to SpinOne for Salesforce.

Today, we are going to be discussing SpinSPM.

SpinOne’s SaaS Security Posture Management solution for Salesforce.

There are three components for SSPM, posture management, risk assessment, and user audit.

Posture management is a solution dedicated to the scanning of your Salesforce environment, to assess its security, and give it a reading as to how secure it is.

Break down this posture score by referencing the posture summary. Improve the overall security of your Salesforce environment by referencing the standards to which Spin has mapped: ISO 27001, SOC 2, and NIS 2, as well.

Navigating to the controls tab on the left hand toolbar, it controls a security recommendation to harden and improve the security of the SaaS environment.

In this case, Salesforce.

With the in-house created controls here, we can click into a control and be greeted with an understanding of what this control is all about.

Furthermore, we can have an understanding on an organizational level of which of our protected organizations does not have this specific control enabled.

Now that we have visibility around a misconfiguration gap that we can still fill, click into the Actions tab to be greeted with a step by step guide on exactly how to fulfill this control .

Each control has its own set of actions.

To launch a manual scan of your Salesforce environment after fulfilling these controls, select Scan Now.

To generate a posture report of your current environment, select Generate Report.

The added component, almost two products in one, is risk assessment.

Now what we’re looking at is external vulnerabilities, Understanding all the connected applications to your Salesforce environment.

More than that, getting education into those applications, as far as their marketplace rating, where it’s being found, the organization’s utilizing it, and of course, its security scope.

Lastly, select User Audit to be greeted with visibility on a user by user basis around their activity and Salesforce and the risk associated with them.

This is SpinSPM on SpinOne for Salesforce.