Salesforce may prompt your organization to review or update Security Contact Information to ensure the right people are notified about important security-related matters tied to your org. Salesforce recommends keeping this information current as part of your organization’s security and account management best practices.

Why is Salesforce prompting this?

Salesforce uses Security Contact Information to identify who should receive security notifications for your org, including:

• Security alerts
• Incident notifications affecting your Salesforce instance
• Vulnerability or trust-related communications
• Urgent notices that may require administrator action

You may see this prompt because:

• No security contact has been assigned yet
• The current contact is outdated
• The assigned contact has changed roles or left the organization
• Salesforce is periodically requesting verification to keep records accurate

 

Why is this important?

Keeping your Security Contact Information up to date helps ensure your organization receives critical communication from Salesforce as quickly as possible.

Benefits:

• Faster response to security incidents – The right admin gets notified immediately
• Improved org security – Helps protect your Salesforce environment and data
• Better communication during outages or incidents – Salesforce can reach the correct internal contact
• Compliance  ownership – Ensures someone is responsible for monitoring security-related updates

Salesforce notes that protecting your org is a shared responsibility between Salesforce and your internal team.

 

How to Update Salesforce Security Contact Information

For most Salesforce core products (Sales Cloud, Service Cloud, Industry Cloud), System Administrators can manage this directly in Setup.

Steps

1. Log in to Salesforce

Sign in with a System Administrator account.

2. Open Setup

Click the gear icon in the top-right corner → Setup

3. Search for Company Information

In the Quick Find box, search:

Company Information

4. Locate Security Contact Information

Find the section related to:

• Security Contact
• Security Notification Contact
• Company Contact Details

5. Review or Update the Contact

Add or confirm:

• Name
• Email Address
• Contact details of the person responsible for Salesforce security notifications

This is typically:

• Salesforce Administrator
• IT Security Lead
• System Owner
• Operations or Platform Owner

6. Save

Click Save to apply the changes.

 

Step-by-Step Walkthrough

Here’s the walkthrough guide:

View the Scribe Guide: Updating Salesforce Security Contact Information

This guide provides screenshots and step-by-step instructions to complete the update.

 

Recommendation

If your organization has multiple Salesforce admins, it’s a good idea to review this information periodically—especially after staffing or role changes—to ensure security communications always reach the correct person.