Salesforce Security Made Simple with Invisibles, Configurables, Enhanceables

Today on the Salesforce Admins Podcast, we talk to Laura Pelkey, Director of Customer Security Communications & Engagement, and Kylie McKlveen, Director of Product Marketing at Salesforce. Join us as we chat about a simple framework for thinking about security in Salesforce and what you can do to protect your org. You should subscribe for the full episode, but here are a few takeaways from our conversation with Laura Pelkey and Kylie McKlveen. The evolving security landscape in the age of AI With Agentforce and the rise of AI, protecting your data is more important than ever before. Remember, the bad guys have access to these tools too, and that means phishing and deep fake attacks are becoming more sophisticated by the day. That's why I wanted to bring Laura and Kylie on the pod to talk about security. They're here to help explain how Salesforce is already hard at work to help you protect your data, and what simple steps you can take to beef up security for your org. A simple Salesforce security framework Laura and Kylie have a simple framework for the security available to you on Salesforce. There are three layers to think about: Invisibles: The things that Salesforce already does to watch your back. This includes a global, 24/7 threat hunting team that is constantly scanning the network for anomalous events. Configurables: These are actions you as a Salesforce Admin can take to make your org more secure. Taking the time to configure your security settings and think through your permission sets can go a long way towards protecting your org. Enhanceables: If you work in a heavily regulated industry or have sensitive data, you may need to take extra steps to enhance your security. Tools like Salesforce Shield and Security Center can give you an extra layer of protection. Most admins will want to focus on the configurables, and the security team has put together a handy video series to walk you through your next steps. The importance of data continuity One important piece of the security puzzle is continuity. Protecting against attacks is important, but you also need to account for human error—sometimes users make mistakes. If someone's delete key gets stuck, tools like Backup & Restore and Field Audit Trail can help you save the day. If you want to learn more, be sure to check out the Dreamforce Security Keynote on Salesforce+. And don't forget to subscribe to the Salesforce Admins Podcast so you never miss an episode. Podcast swag Salesforce Admins on the Trailhead Store Learn more Security Keynote: Protecting the Agentic Enterprise The 360 Blog: Laura on security YouTube series: Trusted Enterprise Security: Built on Salesforce Meet the Long-Lost Fourth Member of Snap, Crackle and Pop Admin Trailblazers Group Admin Trailblazers Community Group Social Laura on LinkedIn Kylie on LinkedIn Salesforce Admins on LinkedIn Salesforce Admins on X Mike on Bluesky social Mike on Threads Mike on X Full show transcript Mike: This week on the Salesforce Admins Podcast, we're diving into some security framework that you've either seen online or at Dreamforce, specifically wrapping your head around invisibles, configurables, and enhanceables. So this week I am joined by longtime podcaster and security champion Laura Pelkey and new voice and new to the Salesforce Trusted Services Team, Kylie McKlveen. They are both here to help us unpack how we can think about the security layers baked into the platform, the settings they control, and the tools available for us to go even further. Plus we also jump into a little bit about what AI means for keeping your org secure. This is a fun podcast, and we also bring in a little bit of pop culture. I won't ruin it, but Sylvester Stallone does make an appearance in this episode. So with that, let's get Laura and Kylie on the podcast. So Kylie and Laura, welcome to the podcast. Laura Pelkey: Hey, Mike. Kylie McKlveen: Hey, thanks for having us. Mike: I know. This is going to be fun, even though... Well Laura's a long time podcaster, so she makes security fun, but Kylie's a new voice. So Laura, let's start with you. Refresh everybody, what you've been up to at Salesforce since we've last chatted. Laura Pelkey: Yeah, I know it's been a little while. I'm very happy to be back on the pod. Thank you for having me. So I'm actually coming up on my nine-year anniversary at Salesforce, which is crazy. Can't believe it's been that long. And lately I've been at Dreamforce speaking, writing a lot of blogs about security, and still just trying to get the word out there to our customers about how to be secure with their Salesforce data. Mike: Yep, absolutely. And Kylie, you're a new voice to the podcast, so welcome. Tell us a little bit about how you got started at Salesforce and what you do. Kylie McKlveen: Thanks, yeah, what do they say, long time listener, first time caller? So yeah, I work on our product marketing team for our trusted services products. I've actually...