Salesforce Government Cloud: Ensuring Compliance and Security

Salesforce Government Cloud public sector solutions offer dedicated instances known as Government Cloud Plus and Government Cloud Plus – Defense. These instances are built on Salesforce Customer 360, featuring both Platform-as-a-Service (PaaS) and Software-as-a-Service (SaaS) offerings.

Mission Impact and Usage:
- Designed for U.S. federal, state, and local government customers, U.S. government contractors, and Federally Funded Research and Development Centers (FFRDCs).
- Tailored for mission impact, ensuring a dedicated environment for government operations.
Security Accreditations:
- Government Cloud Plus:
  - FedRAMP High Provisional Authority to Operate (P-ATO) from the Joint Authorization Board (JAB).
  - DoD IL4 PA, IRS 1075, and NIST SP 800-171 attestations.
- Government Cloud Plus – Defense:
  - FedRAMP High P-ATO from the JAB.
  - DoD IL5 PA, IRS 1075, and NIST SP 800-171 attestations.
Parity and Accreditation Standards:
- Strives to maintain parity with commercial cloud products, but differences may exist due to accreditations, and customers can choose to accept associated risks.

Built for Government:
- Dedicated environments for U.S. government agencies and contractors, including federal, state, local, defense, and intelligence organizations.
Unlock Compliance:
- Meet compliance requirements such as FedRAMP High, IRS 1075, and DoD Impact Level 4 and 5 (IL4 and IL5).
Security-First Infrastructure:
- Built on AWS GovCloud, a leading FedRAMP-authorized cloud, meeting stringent data security demands.
Innovate Faster:
- Save time and money with best-practice industry apps and no-code tools.
Operate with Confidence:
- Unlock real-time insights into system and security performance.

Customize Government Solutions:
- Tailor solutions with industry apps and consulting partners.
Challenges Faced by Government and Government Contractors:
- Handling and protecting sensitive data amidst increasing cybersecurity threats.
- Meeting compliance mandates in an evolving regulatory landscape.
Role of FedRAMP:
- Mandates a standardized approach to security assessment and authorization for cloud products and services.
Government Cloud Plus Benefits:
- Dedicated instance for U.S. government, addressing security and compliance needs.
- Specifically designed for FedRAMP High and DoD IL4-authorized government cloud platform.

Designed for Government Agencies and Contractors:
- Tailored for U.S. government agencies and contractors to scale and secure apps on a FedRAMP High and DoD IL4-authorized government cloud platform.
Differentiation from Standard Cloud Offerings:
- Specifically designed to help U.S. government agencies scale and secure apps on a FedRAMP High and DoD IL4-authorized government cloud platform.
Government Cloud Plus – Defense:
- Physically dedicated and isolated infrastructure for the Department of Defense.
- Includes security enhancements for handling DoD Impact Level 5 (IL5) data.

Strong Encryption:
- Full data encryption at rest and end-to-end encryption, ensuring data security.
Ongoing Security Vigilance:
- Rigorous security monitoring aligned with FedRAMP and DoD requirements.
- Annual third-party assessments (3PAO) to evaluate security controls.

Maximize Salesforce ROI:
- Guidance and best practices from Premier Success Plans to speed up team adoption.
U.S. Citizen Support Team:
- 24×7 expertise from a U.S. Citizen support team.
Technical Account Manager(s):
- Personalized guidance from designated Technical Account Manager(s).
Proactive Monitoring:
- Ensure stability and security with Proactive Monitoring from Signature.

Federal Risk and Authorization Management Program (FedRAMP):
- U.S. Federal government program standardizing security assessment, authorization, and continuous monitoring for cloud products and services.

Example: U.S. Department of Veteran Affairs (VA):
- Salesforce is leveraged by federal government agencies like the U.S. Department of Veteran Affairs for various projects.