pi-salesforce-security-benchmark

Security Benchmark for Salesforce (SBS) access controls. 12 controls covering permission sets, profiles, permission set groups, RBAC, non-human identities, access reviews, and authorization governance. Use when working with Salesforce permission sets, profiles, users, roles, sharing rules, or access governance.

Security Benchmark for Salesforce (SBS) code security controls. 4 controls covering mandatory peer review, pre-merge static analysis, persistent Apex logging, and sensitive data prevention in logs. Use when writing or reviewing Apex classes, Apex triggers, Lightning Web Components, or configuring CI/CD pipelines for Salesforce.

Security Benchmark for Salesforce (SBS) deployment controls. 6 controls covering deployment identity, high-risk metadata protection, unauthorized change monitoring, source-driven development, secret scanning, and CLI token policies. Use when configuring CI/CD pipelines, deploying Salesforce metadata, managing deployment users, or working with SFDX projects.

Security Benchmark for Salesforce (SBS) file security controls. 3 controls covering public content link expiry, password protection for sensitive content links, and periodic link review and cleanup. Use when working with Salesforce ContentDistribution, public file sharing, or content governance.

Provides general orientation about the Security Benchmark for Salesforce (SBS). Use this skill when a user asks what SBS is, how it is structured, which domains and controls it covers, what risk levels exist, how it maps to compliance frameworks (ISO 27001, SOC 2, NIST, HIPAA, GDPR, CCPA/CPRA), or how SBS relates to other security standards. Also use when the user needs a high-level summary before diving into a specific domain skill.