Used Salesforce Platform VAP subscription to create a baseline and automated testing to maintain a compliant state. We then established risk-based validation commensurate with intended use of system, regulatory rigor, technical complexity, business risk, and data integrity risk.
- Establish robust cloud compliance framework to manage risks
- VAP provided baseline qualification/validation deliverables
- Annual Salesforce audit included as part of the subscription
- Validation augmented by SQA (automated) testing and Functional Risk Assessments Validation vs. Qualification Qualified underlying common capabilities (features and functionality)
- Established simpler end-use validation based on verifying configurations of common capabilities; user acceptance / PQs; and extensive validation only for unique capabilities