Podcast/Salesforce at Scale/ Salesforce Security – The Risk May Not be Where You Think

Salesforce at Scale

Episode 42 · Season 1

Salesforce Security – The Risk May Not be Where You Think

April 17, 202634:57

Salesforce Security at Scale isn’t solely about the platform, it’s about your decisions. Some risks don’t come from Salesforce itself, but from how you configure it. In this episode, we break down how to approach Salesforce Security at Scale with a mindset that prevents risk, supports users, and scales with your business.

What you’ll learn:

  • Why over-permissioned users and poor configuration create the biggest risks
  • How to design a multi-layered security model from org to record level
  • Why shifting from profiles to permission sets is critical for scalability

Who it’s for:
Salesforce admins, architects, technical leaders, and business stakeholders responsible for platform strategy and governance

Recommended Links:

Episode Artifact:

SF User Access Policies

SF User Access and Permissions Assistant (appexchange)

Trailhead

Dean Finkelstein on LinkedIn

Allie Nelson on LinkedIn

Greg Banks on LinkedIn

Jason Fowler Music

Cirrius Solutions

Reach out at CirriusTalk@cirriussolutions.com with any questions

Guest:
Dean Finkelstein leads managed services at Cirrius Solutions and brings years of hands-on Salesforce delivery and security experience across client environments.

CTA:
Follow the show and share this episode with leaders responsible for Salesforce security and scale.

We cover

  • Salesforce Security
  • Salesforce at Scale
  • Permission Sets
  • MFA
  • Data Governance

Resources and downloads

The artifacts Greg’s team built for this episode, free to download.

Salesforce Security – The Risk May Not be Where You Think

A visual walkthrough of Salesforce security best practices for 2026, built around the four layers of the Salesforce security model: org, object, field, and record-level security. Explains why most real-world risk comes from misconfiguration rather than the platform itself, and how to protect data, manage access, and get your org ready for AI.