A public sector agency recently implemented Public Sector Solutions for license and permit use cases. The agency is now planning to get certified for…

Salesforce Shield is a suite of add-on security tools designed to help customers meet complex governance and compliance requirements, such as ISO 27001. It provides three core services: Platform Encryption for enhanced data protection of data at rest, Event Monitoring for detailed auditing of user and system activity, and Field Audit Trail for extended data retention policies. These capabilities directly address the need for enhanced security, data protection, and auditing that the public sector agency requires for its certification process. The other options are standard platform features with more limited functionality and are not considered add-on products in the same category as Shield.

A. Setup Audit Trail: This is a standard, built-in feature for tracking administrative and metadata changes, not a comprehensive add-on product for data protection and enhanced auditing of user activity.

B. Field History Tracking: This is a standard feature with limitations on the number of fields tracked and data retention. It lacks the enhanced capabilities and long-term retention of Shield's Field Audit Trail.

D. Classic Encryption: This is a legacy encryption feature that only protects a limited set of custom text fields and is less robust than Shield Platform Encryption, which is the recommended solution.

1. Salesforce Help, "Salesforce Shield": "Salesforce Shield is a trio of security tools that helps you build an extra layer of trust, compliance, and governance right into your business-critical apps. It includes Shield Platform Encryption, Shield Event Monitoring, and Shield Field Audit Trail." (This document establishes Shield as the add-on suite for compliance).

2. Salesforce Developer Documentation, "Shield Platform Encryption Architecture": "Shield Platform Encryption gives your data a whole new layer of security while preserving critical platform functionality... This feature helps you meet the privacy policies, regulatory requirements, and contractual obligations for handling private data." (This source connects Shield's encryption to meeting regulatory requirements).

3. Salesforce Trust, "Compliance at Salesforce": The Salesforce compliance documentation lists certifications including ISO/IEC 27001, 27017, and 27018. While Salesforce maintains these certifications for its infrastructure, products like Salesforce Shield provide the tools for customers to meet their own compliance obligations on the platform. The document states, "Salesforce offers robust controls to help customers maintain their own compliance requirements." Shield is the primary product for this purpose.

4. Salesforce Help, "Field Audit Trail": "With Field Audit Trail, you can know the state and value of your data for any date, at any time... Field Audit Trail lets you create a forensic data-level audit trail... This feature helps you meet industry regulations related to audit capability and data retention." (This source confirms Field Audit Trail's role in meeting regulatory audit requirements).