Salesforce Shield is a trio of security tools that helps admins and developers build extra levels of trust, compliance, and governance right into business-critical apps. It includes

1. Shield Platform Encryption - natively encrypt your most sensitive data at rest

2. Event Monitoring - access to detailed performance, security, and usage data

3. Field Audit Trail - forensic data level audit; state and value of your data for any date, at any time

We guide our clients using Salesforce recommended best practices and may be summarized as follows::

✔Assist our clients identify encryption needs - threat modelling, classification of data and in the evaluation business functionality

✔Test Platform Encryption in a Sandbox before deploying to Production.

✔Assist in defining our client's Key Management strategy

✔Assist in maintaining an organization's encryption policy and monitoring business impact.

It is imperative Salesforce customers develop a robust data backup strategy as part of their overall data management and security model. Salesforce provides a few native options for data and metadata backup.

In addition, there are a number of data backup solutions offered by various ISV partners on the AppExchange.

We work with our clients to evaluate solutions that fit the organization's needs from business, compliance, and IT perspectives. While needs and requirements vary for different clients, we we recommend solutions that

✔ Provide automated backup, recovery, and archival

✔ Supports sandbox seeding (important for DevOps).

✔Provides various other functionality including the ability to access Salesforce data for analysis without interfering with the Production environment in an automated manner.