What Happened When a Salesforce Security Test Reached the CEO's Laptop?
John Somorjai says one Salesforce penetration test reached all of a company's source code, got into the CEO's laptop, and pulled information about employees, and the problems were unrecoverable. The failure usually comes after the term sheet, not at the eleventh hour. Price and the major terms are already set, and then deep diligence starts.
Salesforce shares those findings and tries to help the company fix them. This case was among the worst he had seen. Other security findings can be fixed. The team sorts them into P0, P1, and P2 problems. Some must be fixed before signing. Others must be fixed before close. How bad the findings are sets that condition, and a company has to have its house in order before the process starts.
Inside Salesforce’s $100 Billion M&A Playbook | John Somorjai ·