Due Diligence and Ongoing Monitoring

This message was posted by a user wishing to remain anonymous

I am curious to hear how other financial institutions handle Salesforce apps and/or Salesforce-approved partners in their vendor management program?  Do you vet them as part of your program, or exclude them from scope based on Salesforce's review?

We vetted the Salesforce Cloud solution, and the AppXchange applications are vetted as new vendors.  In our case, since we are "connecting" our existing applications to Salesforce thru the API Platform, Salesforce, the API Platform Vendor, and the source vendor have been vetted.
Original Message:
Sent: 01-13-2022 01:59 PM
From: Anonymous Member
Subject: Salesforce Apps/Partners

This message was posted by a user wishing to remain anonymous

I am curious to hear how other financial institutions handle Salesforce apps and/or Salesforce-approved partners in their vendor management program?  Do you vet them as part of your program, or exclude them from scope based on Salesforce's review?

We, also, vetted Salesforce in order to closely review data privacy.
Original Message:
Sent: 01-13-2022 01:59 PM
From: Anonymous Member
Subject: Salesforce Apps/Partners

This message was posted by a user wishing to remain anonymous

I am curious to hear how other financial institutions handle Salesforce apps and/or Salesforce-approved partners in their vendor management program?  Do you vet them as part of your program, or exclude them from scope based on Salesforce's review?