Functional security: profiles and permissions

Data security: encryption and visibility

External access: data sharing and third-party apps

Software composition analysis: packages and libraries

Org security: timeout and login settings