Power Platform Governance Roadmap
All epics
S4P1DraftPlatform Run the Business
Data Protection & DLP Consolidation
Reduce data loss risk and raise manageability by replacing per-environment policies with a small, deliberate, zone-based policy set.
Consolidation of 129 fragmented DLP policies into a small zone-aligned set, with proper connector classification.
SupportDogaru Eduard
Lead
Marius Oprea
Owner
—
Deliverables
8
Effort
11.5
sprints
Delivered
0/8
Deliverables
| Ref | Title | Phase | Priority | Owner | Sprints | Status | |
|---|---|---|---|---|---|---|---|
| S4.1 | Connector classification standard Classify every connector as business, non-business or blocked, with a documented rationale. Connectors are currently not structurally classified and all 129 policies carry non-business connectors. | Phase 1 | P1 | Marius Oprea | 2 | Draft | |
| S4.2 | Design the consolidated zone-based DLP policy set Replace per-environment policies with a small set tied directly to the governance zones. Microsoft guidance is between two and five policies against the current 129. | Phase 1 | P1 | Marius Oprea | 2 | Draft | |
| S4.3 | Implement a catchall DLP policy Add the safety fallback policy that applies where environments are not otherwise assigned. None exists today. | Phase 2 | P1 | Dogaru Eduard | 0.5 | Draft | |
| S4.4 | Remediate environments with no DLP policy Bring the 17 environments currently outside any DLP policy under coverage. | Phase 1 | P1 | Dogaru Eduard | 1 | Draft | |
| S4.5 | Retire duplicate and narrow-scope policies Decommission the 4 duplicate policies and consolidate the 125 policies scoped to fewer than five environments, resolving the 62 environments carrying more than one policy. | Phase 2 | P1 | Dogaru Eduard | 2.5 | Draft | |
| S4.6 | Fine-tune DLP for the default environment Tighten the policy covering personal productivity, the riskiest environment, addressing the apps and flows using unrecommended connectors such as HTTP, SQL Server and file system. | Phase 1 | P1 | Marius Oprea | 1.5 | Draft | |
| S4.7 | Connector exemption request and approval route A named approver, a documented rationale and an expiry date for every connector exemption. No expiry, no exemption. | Phase 2 | P1 | Ovidiu Kislaposi | 1 | Draft | |
| S4.8 | Include desktop flow actions in DLP Enable desktop flow actions in DLP, having first assessed the impact on the 483 existing desktop flows. Once enabled this setting cannot be disabled. | Phase 2 | P3 | Dogaru Eduard | 1 | Draft |
By phase
- Phase 14 · 6.5 spr
- Phase 24 · 5 spr
- Phase 30 · 0 spr
By priority
- P17 items
- P20 items
- P31 items