Business application security audit

Business applications such as your CRM, HRM, ERP or accounting system hold the crown jewels of your organization: customer data, personnel files, contracts and financial data. More and more often they run as SaaS services with integrations to other systems and with access for employees, customers and partners. In a security audit of your business applications, Secure Sense assesses whether the setup is secure and where an attacker sees opportunities.

Which applications?

Salesforce, AFAS, Exact, HubSpot, Microsoft Dynamics 365, Workday and other SaaS applications that hold business data. For Salesforce and AFAS we have a detailed approach: read more about the Salesforce security audit and the AFAS security audit. We assess other platforms in the same way. We define the scope together during the intake call.

What do we assess?

Our assessment includes:

• Identities and access: single sign-on, multi-factor authentication and the password and session policies
• Permissions, roles and segregation of duties: who can view, change, export and approve what
• Integrations and APIs: connections, connected apps and the permissions they have been given
• Sharing settings and external access: portals, customer environments and shared reports
• Logging and alerting: will you notice when something goes wrong?
• Old accounts, default settings and the vendor's configuration

Why now?

Most incidents involving business applications are not caused by a flaw in the software but by the setup: an integration with too many permissions, an administrator account without multi-factor authentication or data that is accidentally visible to everyone. An attacker finds such mistakes faster than your own administrator does.

What do you get?

A report with all findings in order of risk and for each finding the specific setting or measure that resolves it. Clear to management and ready for your administrator or implementation partner to act on. If you wish, we go through it together.

Want to know whether your business applications are as secure as you think? Request a no-obligation quote.