Smartsheet Security Capabilities and Practices

This whitepaper outlines the security capabilities, practices, and protections of Smartsheet, emphasizing the importance of multiple layers of defense in enterprise-grade software as a service (SaaS) platforms. It details the recommended customer-controlled capabilities necessary for maintaining a secure and compliant work environment. The document focuses on three main areas: identity and access management, data governance, and global account configuration. Identity and access management ensures user roles align with organizational policies, while data governance enforces a least privilege approach. Global account configuration allows customization of the Smartsheet environment to enhance security. Additionally, the whitepaper discusses Smartsheet's security, privacy, and compliance practices, highlighting the defense-in-depth strategies implemented to protect customer data. The document also covers identity management, authentication methods, multi-factor authentication, session management, and user lifecycle management, providing a comprehensive view of the security measures in place to safeguard sensitive information.