Power Platform Governance Roadmap

All epics
S4P1DraftPlatform Run the Business

Data Protection & DLP Consolidation

Reduce data loss risk and raise manageability by replacing per-environment policies with a small, deliberate, zone-based policy set.

Consolidation of 129 fragmented DLP policies into a small zone-aligned set, with proper connector classification.

SupportDogaru Eduard
Lead
Marius Oprea
Owner
Deliverables
8
Effort
11.5
sprints
Delivered
0/8

Deliverables

RefTitlePhasePriorityOwnerSprintsStatus
S4.1
Connector classification standard
Classify every connector as business, non-business or blocked, with a documented rationale. Connectors are currently not structurally classified and all 129 policies carry non-business connectors.
Phase 1P1Marius Oprea2Draft
S4.2
Design the consolidated zone-based DLP policy set
Replace per-environment policies with a small set tied directly to the governance zones. Microsoft guidance is between two and five policies against the current 129.
Phase 1P1Marius Oprea2Draft
S4.3
Implement a catchall DLP policy
Add the safety fallback policy that applies where environments are not otherwise assigned. None exists today.
Phase 2P1Dogaru Eduard0.5Draft
S4.4
Remediate environments with no DLP policy
Bring the 17 environments currently outside any DLP policy under coverage.
Phase 1P1Dogaru Eduard1Draft
S4.5
Retire duplicate and narrow-scope policies
Decommission the 4 duplicate policies and consolidate the 125 policies scoped to fewer than five environments, resolving the 62 environments carrying more than one policy.
Phase 2P1Dogaru Eduard2.5Draft
S4.6
Fine-tune DLP for the default environment
Tighten the policy covering personal productivity, the riskiest environment, addressing the apps and flows using unrecommended connectors such as HTTP, SQL Server and file system.
Phase 1P1Marius Oprea1.5Draft
S4.7
Connector exemption request and approval route
A named approver, a documented rationale and an expiry date for every connector exemption. No expiry, no exemption.
Phase 2P1Ovidiu Kislaposi1Draft
S4.8
Include desktop flow actions in DLP
Enable desktop flow actions in DLP, having first assessed the impact on the 483 existing desktop flows. Once enabled this setting cannot be disabled.
Phase 2P3Dogaru Eduard1Draft

By phase

  • Phase 14 · 6.5 spr
  • Phase 24 · 5 spr
  • Phase 30 · 0 spr

By priority

  • P17 items
  • P20 items
  • P31 items