Know the default Security Settings

This post highlights many of the security-related settings and shows both their default values and the values recommended by Salesforce.com Information Security.

Password Settings 

Setup > Security Controls > Password Policies 

Session Settings 

Setup >   Security Controls >  Session Settings

Other Security Controls 

These controls should be enabled as appropriate for your company.

Sensitive Permissions 

When using custom profiles, we recommend reviewing profiles for at least these sensitive permissions.