Salesforce Security Considerations

Storing data in cloud with no control over it makes many people anxious and really worried but Salesforce comes with really secure data storage capabilities which for enterprises at their own is not achievable or even if it is, it will be really expensive. So relax Salesforce has been audited by many international standards and have acquired following certifications 

• PCI DSS
• FISMA
• ISO/IEC 27001:2005
• SAS 70 Type II
• SysTrust
• EU-US

Salesforce prevents your data from any Physical damages by providing safety from 

• Humidity & Temperature 
• Power Loss 
• Network Loss or Congestion
• Early Fire Detection & Prevention

To secure your data from intrusions salesforce follows following approach

• SPI at perimeter firewall : Stateful packet inspection is done at all the packets coming in on the outer firewall, stateful helps in letting network know the connections and sessions and with this technology packets are not only invested for their headers but for their payloads too, thus leaving chances to error at very low probability.
• Bastion Stations : After the outer firewall screened with SPI packets reach bastion stations, which are specially designed computer to defend any attacks, these are defined and designed with highest possible security parameters to in selfs are enough to prevent any attack
• TLS/SSL : Cryptographic protocols encrypt all network data transmissions.

And To prevent the application, we have all sort of security features like : Profile, Object Level security, Field Level security and Record level security as per requirement orgs can always enable two factor integration or have third party biometrics installed!

So place your data on Salesforce and worry just about building apps and logic, without worrying about anything related to infrastructure.