TMA-POWERPLATFORM-3.4
Ensure 'DLP policies are enabled and restrict the connectors usage'
Deskripsi
Power Platform data loss prevention policies (DLP) act as guardrails to help prevent users from unintentionally exposing organizational data. These data loss prevention policies enforce rules for which connectors can be used together in apps and flows. The policies can be scoped to one environment, many environments, or tenant-wide Power Apps and automation are becoming increasingly connected across multiple data sources and multiple services. Some of these might be external, third-party services and might even include some social networks. Users generally have good intentions, but they can easily overlook the potential for exposure from data leakage to services and audiences that shouldn't have access to the data. Categorize the data connectors into one of three data groups, "Business data only", "No business data allowed" and “Blocked”. Users will be prevented from creating flows an...
Cara pemeriksaan
Metode audit: Tinjauan manual
Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.
Verify DLP policies are enabled. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com. 2. Expand Policies in the left pane then select Data policies 3. Verify that organizational policies are set and applied.
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
Ensure DLP policies are enabled. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com. 2. Expand Policies in the left pane then select Data policies. 3. Click New Policy to initiate the policy wizard. 4. Name the policy, then click next. 5. At the Custom Connectors choose which connectors should fit in every data group: a. Business b. Non-business (Default) c. Blocked d. Ignore. 6. For the Scope ensure to select all applicable environments. 7. Click Create policy.
Properti
- Sistem operasi
- Apa saja
- Tag
- power-platformsaas
- Referensi
- CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 3.4 Ensure 'DLP policies are enabled and restrict the connectors usage'