Getting Started 
Trainings 
News 
FAQs 
Webinars Salesforce Security Contact Information
Salesforce now lets administrators define who gets contacted if there is a security issue in the org. This is not an urgent or breaking change, and no enforcement deadline is attached to it. It does, however, determine who Salesforce reaches out to when it matters most, so we recommend handling it now.
What it is?
A Security Contact is the person, or the distribution list, that Salesforce notifies directly if your organization is involved in a security incident or requires urgent security action. Without a designated Security Contact, a time sensitive notice may land with a billing owner or a general admin address that nobody actively monitors, instead of reaching the people who can actually respond.
What is the change?
The Deadline: None. Recommended immediately.
Setting up Security Contacts previously required opening a case with Salesforce Support. Salesforce now lets System Administrators add, edit, and remove Security Contacts themselves, directly on the Company Information page in Setup of the production org. A few requirements apply:
- At least one Security Contact is required.
- Corporate email addresses only. Personal accounts such as Gmail or Yahoo are not accepted.
- Salesforce recommends a monitored distribution list, or two contacts as a contingency, so a notification never depends on one person being available.
- This applies to the core clouds (Sales, Service, and Industry Clouds). Contacts for other products, such as Marketing Cloud, MuleSoft, and Data Cloud, are still managed through the Salesforce Help Portal.
Impact on Simploud
This is an org level Salesforce administrative setting. It does not affect Simploud functionality, your validated state, your configuration, or any Simploud integration. Therefore, there is no impact on Simploud.
Please note that Simploud cannot set this on your behalf. Only a System Administrator in your own org can define Security Contacts.
Actions Required
In your production org, go to Setup > Company Information and add your Security Contacts.
We recommend using a monitored security or IT distribution list rather than an individual mailbox, and reviewing the entry whenever someone changes role or leaves the company, so security notifications always reach an active recipient.