Ensure 'DLP policies are enabled and restrict the connectors usage'

ВысокийУровень 1Ручная проверкаpower-platform

Описание

Power Platform data loss prevention policies (DLP) act as guardrails to help prevent users from unintentionally exposing organizational data. These data loss prevention policies enforce rules for which connectors can be used together in apps and flows. The policies can be scoped to one environment, many environments, or tenant-wide Power Apps and automation are becoming increasingly connected across multiple data sources and multiple services. Some of these might be external, third-party services and might even include some social networks. Users generally have good intentions, but they can easily overlook the potential for exposure from data leakage to services and audiences that shouldn't have access to the data. Categorize the data connectors into one of three data groups, "Business data only", "No business data allowed" and “Blocked”. Users will be prevented from creating flows an...

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

Verify DLP policies are enabled. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com. 2. Expand Policies in the left pane then select Data policies 3. Verify that organizational policies are set and applied.

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

Ensure DLP policies are enabled. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com. 2. Expand Policies in the left pane then select Data policies. 3. Click New Policy to initiate the policy wizard. 4. Name the policy, then click next. 5. At the Custom Connectors choose which connectors should fit in every data group: a. Business b. Non-business (Default) c. Blocked d. Ignore. 6. For the Scope ensure to select all applicable environments. 7. Click Create policy.

Свойства

Операционные системы: Любая
Теги: power-platformsaas
Источник: CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 3.4 Ensure 'DLP policies are enabled and restrict the connectors usage'