TMA-POWERPLATFORM-3.4

Ensure 'DLP policies are enabled and restrict the connectors usage'

높음레벨 1수동 검토power-platform

설명

Power Platform data loss prevention policies (DLP) act as guardrails to help prevent users from unintentionally exposing organizational data. These data loss prevention policies enforce rules for which connectors can be used together in apps and flows. The policies can be scoped to one environment, many environments, or tenant-wide Power Apps and automation are becoming increasingly connected across multiple data sources and multiple services. Some of these might be external, third-party services and might even include some social networks. Users generally have good intentions, but they can easily overlook the potential for exposure from data leakage to services and audiences that shouldn't have access to the data. Categorize the data connectors into one of three data groups, "Business data only", "No business data allowed" and “Blocked”. Users will be prevented from creating flows an...

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Verify DLP policies are enabled. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com. 2. Expand Policies in the left pane then select Data policies 3. Verify that organizational policies are set and applied.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Ensure DLP policies are enabled. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com. 2. Expand Policies in the left pane then select Data policies. 3. Click New Policy to initiate the policy wizard. 4. Name the policy, then click next. 5. At the Custom Connectors choose which connectors should fit in every data group: a. Business b. Non-business (Default) c. Blocked d. Ignore. 6. For the Scope ensure to select all applicable environments. 7. Click Create policy.

속성

운영 체제: 모두
태그: power-platformsaas
참고 자료: CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 3.4 Ensure 'DLP policies are enabled and restrict the connectors usage'