AI is changing what Salesforce security needs to govern
WithSecure's Trust Mapping paper proposes a framework for governing trust relationships across Salesforce workflows, AI agents, integrations and connected SaaS systems.
WithSecure's paper 'Navigating Trust in the Modern Salesforce Ecosystem' introduces a Trust Mapping Framework spanning five domains: entities, information, connections, actions and system outcomes. It applies to Salesforce, Agentforce, Headless 360, third-party SaaS and AI-assisted workflows where users, AI agents, APIs and integrations form trust relationships. A Discovery step maps relationships, a Governance step assesses, restricts or retires them, and the paper defines 'trust drift' such as stale credentials, excessive access and unvalidated AI recommendations.
- Trust Mapping Framework spans five domains: entities, information, connections, actions and system outcomes.
- Applies to Salesforce, Agentforce, Headless 360, third-party SaaS and AI-assisted workflows.
- Defines trust drift: stale credentials, excessive access and unvalidated AI recommendations.
- Governance reviews use OAuth scope changes, incidents, audits and model evaluations as evidence.
- Vendors
- WithSecureSalesforce
- Organizations
- WithSecure
- AI models
- Claude
From the original article
3 min read at helpnetsecurity.com
Existing security and governance practices have largely focused on identities, permissions, access, configurations and controls. WithSecure’s Navigating Trust in the Modern Salesforce Ecosystem paper says Salesforce environments also require organizations to understand what information they rely on, how trust extends across connected systems, what actions are performed and what outcomes those actions produce.
By Anamarija Pogorelec · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.