Salesforce Data Governance What dark secrets lurk in your instance??

BSidesLV 2019

Presented by: Pete Thurston
Date: Tuesday August 06, 2019
Time: 19:00 - 19:25
Location: Proving Ground

Over the years, Salesforce has grown and evolved exponentially. Companies are leveraging Salesforce in many ways, adding even more sensitive customer data to the platform. While Salesforce is very secure, it’s still a platform that can be implemented in a way that puts your org at risk.

So how do you know Salesforce is implemented in a way that meets your compliance needs? And how do you actually align your Salesforce implementation to your Security Posture?

It all starts with Data Governance, the foundation for Salesforce security. Data Governance provides the ability to effectively manage data using appropriate controls throughout the information lifecycle process to meet various internal and external requirements.

We’ll explain the basics and then dive into the more complex topics on how Salesforce, the lifecycle of customer data, and regulatory compliance can all effectively co-exist. We will explain the capabilities available to implement the 4 pillars of Data Governance (Data Inventory, Data Security, Data Privacy and Data Compliance).

You’ll walk away with tangible next steps for governing Salesforce, like data classification, access management, encryption at rest, user access management, compliance reporting and more.

Pete Thurston

Pete has spent over 15 years at the intersection of Business and Technology. Understanding the complexities of enterprise business as well as the intricacies of running a small company is something, he prides himself in. He has worn many hats (often at the same time) throughout his career including Data Analyst, Product Owner, Business Analyst, Software Engineer, Team Leader, QA Engineer and probably several others he’s forgotten. Out of all of this, he’s discovered his passion is really in identifying simple and effective applications of technology to the problems all businesses face. This has driven his leadership of the technology team at RevCult since day one and has proven to be enjoyable, sustainable and productive for the company.


KhanFu - Mobile schedules for INFOSEC conferences.
Mobile interface | Alternate Formats