v0.4.1

Security Benchmark for Salesforce v0.4.1

This release includes 24 controls across the following categories:

• Foundations (1 control)
• OAuth Security (3 controls)
• Integrations (3 controls)
• Permissions (4 controls)
• Authentication (3 controls)
• Code Security (3 controls)
• Data Security (2 controls)
• Change Management (3 controls)
• Security Configuration (2 controls)

Machine-Readable Format

The attached sbs-controls.xml file provides a machine-readable representation of all controls, suitable for consumption by security tooling vendors and automated compliance scanners.

XML Schema

<sbs_benchmark version="0.4.1" xmlns="https://securitybenchmark.dev/sbs/v1">
  <metadata>
    <title>Security Benchmark for Salesforce</title>
    <version>...</version>
    <total_controls>24</total_controls>
  </metadata>
  <controls>
    <category>
      <name>...</name>
      <description>...</description>
      <control id="SBS-XXX-001">
        <title>...</title>
        <statement>...</statement>
        <description>...</description>
        <rationale>...</rationale>
        <audit_procedure>...</audit_procedure>
        <remediation>...</remediation>
        <default_value>...</default_value>
      </control>
    </category>
  </controls>
</sbs_benchmark>

Documentation

Full documentation is available at securitybenchmark.dev