Salesforce orgs drift. Fields pile up, users leave, and automation gets layered on top of automation. Run this checklist each quarter to catch problems while they're still small.
Security
- Run Security Health Check in Setup and fix high-risk settings.
- Freeze or deactivate users who have left, and reassign their records.
- Review who has Modify All Data and View All Data. The list should be short.
- Move access from profiles to permission sets and permission set groups where you can.
Data
- Check duplicate rules and run a duplicate report on accounts, contacts and leads.
- Look at data and file storage in System Overview before you hit the limit.
- Find custom fields that are mostly empty. Hide or delete the ones nobody uses.
Automation and code
- Count automations per object and look for Workflow Rules or Process Builder still running.
- Review Flow error emails and Apex exception emails from the last 90 days.
- Check overall Apex test coverage. Deployments need at least 75%, and higher is safer.
- Note any Apex classes or components on very old API versions.
Releases
- Read the release notes for the next Salesforce release and test critical processes in a preview sandbox before it reaches production.
Keep a log: record what you found and fixed each quarter. It makes the next review faster and shows trends.