Power Platform & Copilot Governance · Microsoft 365 Security Checkliste

Skillplan M365 Checklist

2026-07-20 19:27

Bewertungsfortschritt 0 / 136 Elemente 0%

Bisherige Erfüllung 0 / 0 Kontrollen 0%

Define Power Platform environments by purpose (Production, Test, Development); restrict creation to admins.

Configure Data Loss Prevention policies separating business and non-business connectors for every environment.

Block connectors known for data exfiltration risk (social media, public storage) by default.

Disable trial environment creation by end users in tenant settings.

Require admin approval for production environment creation and for premium connector usage.

Review the Power Platform admin center analytics monthly to spot abandoned high-risk flows.

Enable Copilot for Microsoft 365 only after sensitivity labels are deployed and verified across SharePoint.

Audit Copilot Studio agents and Power Virtual Agents for outbound connectors that bypass DLP.