Zygon se propose de repenser le modèle de sécurité des SaaS. A ce titre, Salesforce est emblématique. Nous vous proposons donc de vous présenter à la fois les principaux risques pouvant impacter soit la sécurité de vos données, soit pouvant compromettre votre Org. Nous vous montrerons aussi comment mettre en place une alarme permettant de détecter la fuite de données Salesforce et, dans une partie des cas, d’en identifier les auteurs. Kevin et Thomas qui vous présenteront la solution ont plusieurs années d’expérience autour de la sécurité des données des SaaS.

1. Confidential - All rights reserved - © Zygon 2023
zygon.tech
Zygon is the copilot of IT/Security admins to
scale the security configuration controls to all
their SaaS applications.
Scale SaaS Security Posture
Spring 2023
www.zygon.tech

2. Confidential - All rights reserved - © Zygon 2023
6 policies to ensure a safe
usage of modern tools:
● Login
● Ownership
● Privileges
● Third party
integrations
● Offboarding
● Data leak monitoring
What is your responsibility

3. Confidential - All rights reserved - © Zygon 2023
3 parties may be involved in getting unauthorized access to Salesforce

4. Confidential - All rights reserved - © Zygon 2023
4 weak points in Salesforce

5. Confidential - All rights reserved - © Zygon 2023
SaaS Sprawl creates massive security challenges
100
average number of identified SaaS softwares
used by enterprises across all industries.
Sources: CB Insights, G2
1,000
average number of shadow IT
cloud services used in a typical
enterprise 10x
“Clear” vs
“Shadow” IT
< 10
number of SaaS softwares secured by
security teams across all industries.
● "Many organisations do not fully understand the sprawl of their SaaS
portfolio and underestimate the prevalence of shadow SaaS.” Gartner
● Lack of regard for shadow SaaS has fewer consequences than the
implications they create - exposure to cyber threats, noncompliance and
other IT vulnerabilities.

6. Confidential - All rights reserved - © Zygon 2023
Security does not keep up with SaaS Sprawl
Business Users
Security
Teams
● 1 new SaaS secured every
year
● Not enough resources
● Alert fatigue
● Emptying the ocean with
a spoon
● 1 new sign up every day
● Business and efficiency
first
● Security is seen as a
constraint
● Security is not in their job
description

7. Confidential - All rights reserved - © Zygon 2023
You don’t want to be here

8. Confidential - All rights reserved - © Zygon 2023
Be aware
Versus
Be an actor
Everyone is in security

9. Confidential - All rights reserved - © Zygon 2023
What no MFA means

10. Confidential - All rights reserved - © Zygon 2023
SaaS security consequences: data leak
Why should I care?
It was not really a question….

11. Confidential - All rights reserved - © Zygon 2023
Detect data breaches
WHAT
Fake identities
Fake credentials
Fake files
Fake messages
Fake APIs We scan the dark web for
leaks containing the decoys
we have generated for you.
Dark Web
Monitoring
All our decoys come with
an adapted type of
honeypot that detects
their active usage.
(contact, click, open, login,
request,...)
Usage
Monitoring
HOW

12. Confidential - All rights reserved - © Zygon 2023
THANK YOU
Zygon Technologies, Inc.
thomas@zygon.tech
zygon.tech