A nonprofit customer must conflict and store its clients' government-issued ID number. The consultant has set up a custom text field for the ID number. Which security solution should be used to protect this data?
A.
Restrict visibility by removing it from the page layout and utilizing role hierarchy to prevent users from accessing that field except for the staff who need to interact with the government ID data
B.
Encrypt the government ID field with Classic Encryption for Custom Fields and grant View Encrypted Data permission only to those users who have to interact with the data
C.
Turn on two-factor authentication for the staff members who need to collect and use the government ID number field data
D.
Set the org wide default on Contacts to Private so only the user who owns the Contact records can access it.
To protect sensitive data like a government-issued ID number, encrypting the field and carefully managing access permissions is crucial. Here's a step-by-step guide on implementing this security solution:
Create the Custom Field:
Navigate to Setup.
In the Object Manager, select the relevant object (e.g., Contact).
Click on Fields & Relationships.
Create a new Text field for the government-issued ID number.
Enable Classic Encryption for Custom Fields:
In Setup, search for "Encryption Policy".
Enable "Encrypt Custom Fields".
Select the custom field you created for the government-issued ID and mark it for encryption.
Set Permissions:
Navigate to Setup.
Go to Profiles or Permission Sets.
Ensure only the necessary profiles/permission sets have the "View Encrypted Data" permission:
Click on the relevant Profile or Permission Set.
In System Permissions, enable "View Encrypted Data".
Assign this permission only to those users who need to interact with the government ID data.
Adjust Field-Level Security:
In the Object Manager, select the custom field for the government ID.
Click on "Set Field-Level Security".
Ensure the field is visible only to the necessary profiles.
Remove the field from page layouts for users who should not access it.
Test the Setup:
Log in as a user with access to the encrypted data to verify they can view and interact with the data.
Log in as a user without access to ensure they cannot see the encrypted field.
By following these steps, you ensure that the government-issued ID number is encrypted and only accessible to authorized personnel, thereby protecting sensitive client data effectively.
Salesforce Security Guide: Classic Encryption for Custom Fields
Salesforce Permission Sets: Managing Permissions
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit