TMA-POWERPLATFORM-3.4

Ensure 'DLP policies are enabled and restrict the connectors usage'

HochStufe 1Manuelle Prüfungpower-platform

Beschreibung

Power Platform data loss prevention policies (DLP) act as guardrails to help prevent users from unintentionally exposing organizational data. These data loss prevention policies enforce rules for which connectors can be used together in apps and flows. The policies can be scoped to one environment, many environments, or tenant-wide Power Apps and automation are becoming increasingly connected across multiple data sources and multiple services. Some of these might be external, third-party services and might even include some social networks. Users generally have good intentions, but they can easily overlook the potential for exposure from data leakage to services and audiences that shouldn't have access to the data. Categorize the data connectors into one of three data groups, "Business data only", "No business data allowed" and “Blocked”. Users will be prevented from creating flows an...

So wird geprüft

Prüfmethode: Manuelle Prüfung

Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.

Verify DLP policies are enabled. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com. 2. Expand Policies in the left pane then select Data policies 3. Verify that organizational policies are set and applied.

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

Ensure DLP policies are enabled. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com. 2. Expand Policies in the left pane then select Data policies. 3. Click New Policy to initiate the policy wizard. 4. Name the policy, then click next. 5. At the Custom Connectors choose which connectors should fit in every data group: a. Business b. Non-business (Default) c. Blocked d. Ignore. 6. For the Scope ensure to select all applicable environments. 7. Click Create policy.

Eigenschaften

Betriebssysteme: Beliebig
Tags: power-platformsaas
Referenz: CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 3.4 Ensure 'DLP policies are enabled and restrict the connectors usage'