Ensure 'DLP policies are enabled and restrict the connectors usage'

ÉlevéeNiveau 1Revue manuellepower-platform

Description

Power Platform data loss prevention policies (DLP) act as guardrails to help prevent users from unintentionally exposing organizational data. These data loss prevention policies enforce rules for which connectors can be used together in apps and flows. The policies can be scoped to one environment, many environments, or tenant-wide Power Apps and automation are becoming increasingly connected across multiple data sources and multiple services. Some of these might be external, third-party services and might even include some social networks. Users generally have good intentions, but they can easily overlook the potential for exposure from data leakage to services and audiences that shouldn't have access to the data. Categorize the data connectors into one of three data groups, "Business data only", "No business data allowed" and “Blocked”. Users will be prevented from creating flows an...

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

Verify DLP policies are enabled. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com. 2. Expand Policies in the left pane then select Data policies 3. Verify that organizational policies are set and applied.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Ensure DLP policies are enabled. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com. 2. Expand Policies in the left pane then select Data policies. 3. Click New Policy to initiate the policy wizard. 4. Name the policy, then click next. 5. At the Custom Connectors choose which connectors should fit in every data group: a. Business b. Non-business (Default) c. Blocked d. Ignore. 6. For the Scope ensure to select all applicable environments. 7. Click Create policy.

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: power-platformsaas
Référence: CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 3.4 Ensure 'DLP policies are enabled and restrict the connectors usage'