Skillplan M365 Checklist
2026-07-20 19:28
M365
Microsoft 365 Security Checklist
de
en
fr
it
System Online
← Back to sections
Mitigation Controls · Section 17 of 17
Power Platform & Copilot Governance
Assessment Progress
0
/ 136 items
0%
Fulfillment so far
0
/ 0 controls
0%
Explain this control
Define Power Platform environments by purpose (Production, Test, Development); restrict creation to admins.
Not Fulfilled
Fulfilled
Accepted
Configure Data Loss Prevention policies separating business and non-business connectors for every environment.
Not Fulfilled
Fulfilled
Accepted
Block connectors known for data exfiltration risk (social media, public storage) by default.
Not Fulfilled
Fulfilled
Accepted
Disable trial environment creation by end users in tenant settings.
Not Fulfilled
Fulfilled
Accepted
Require admin approval for production environment creation and for premium connector usage.
Not Fulfilled
Fulfilled
Accepted
Review the Power Platform admin center analytics monthly to spot abandoned high-risk flows.
Not Fulfilled
Fulfilled
Accepted
Enable Copilot for Microsoft 365 only after sensitivity labels are deployed and verified across SharePoint.
Not Fulfilled
Fulfilled
Accepted
Audit Copilot Studio agents and Power Virtual Agents for outbound connectors that bypass DLP.
Not Fulfilled
Fulfilled
Accepted
Save and Continue →
