Loading

Managing Your Security Contact in Salesforce Setup (Core Clouds)

Publiceringsdatum: Jun 23, 2026
Beskrivning

Overview

Security incidents are often complex and raise questions about the scope and impact of the event, as well as what actions your organization may need to take. As these questions are best assessed by a member of your security team, it is critical that Salesforce has a Security Contact on file for each of your production environments. This ensures that the Salesforce Security Team can reach the correct authoritative contact during a critical security event.

Which Process Should I Use?

The method for managing security contacts depends on your product, your Success Plan, and which user role is responsible for the update.

Core Clouds (Sales, Service, and Industry Clouds)

  • Who updates: System Administrators on all Success Plans (including Standard).
  • Instructions: Manage security contacts directly within the production org using the process described in the Resolution section below.

All Other Salesforce Products and Clouds (Net Zero, Gov Cloud Plus, Quip, Commerce, Datorama, MuleSoft, Marketing Cloud, Slack, Data Cloud, and Heroku)

Note: While Tableau has been onboarded into the Help portal, security notifications are still delivered to the Security Point of Contact designation, which can be managed through the Tableau Customer Portal.

Lösning

How to Update Your Security Contact (In-App)

If you manage a Core Cloud environment, follow these steps to provide or update your security contact information:

  1. Login: Log in to your Production Salesforce organization.
  2. Navigate to Setup: Click the gear icon and select Setup.
  3. Access Company Information: In the Quick Find box, type Company Information and select it.
  4. Enter Edit Mode: Click the Edit button at the top of the page.
  5. Locate the Security Section: Scroll to the Security Contact Information section.
  6. Enter Details: Provide the following mandatory information:
    1. Name: The full name of the specific individual responsible for security decisions.
    2. Email: A valid email address. Standard formats are permitted, including individual user emails or organizational distribution lists.
    3. Phone: A direct line to the identified security contact. This must be a number where a specific person can be reached for urgent outreach and should not be a generic support team line.
  7. Save: Click Save.

Periodic Notifications

To ensure data accuracy, System Administrators receive regular in-app reminders in production environments if the security contact information is missing, unverified, or requires review. These notifications persist until the required information has been updated, verified, and successfully reviewed.

Knowledge-artikelnummer

005317096

 
Laddar
Salesforce Help | Article