Dynamics 365 Project Operations - Support subscription billing for Project Operations

🚨 The Signal: Dynamics 365 Project Operations will support subscription billing, automating recurring invoicing. This introduces new financial data flows and automated processes, requiring careful security and data governance review for sensitive financial information.

The Impact

Finance and IT teams are affected by new automated financial processes, posing a risk of data integrity issues or unauthorised access if not properly secured.

• Finance teams: Risk of incorrect billing or data exposure if subscription contracts are misconfigured.
• IT administrators: Risk of unauthorised access to financial data if integration points are not secured.
• Security teams: Need to ensure new data flows comply with data protection and access control policies.
• Compliance officers: Must verify automated processes meet regulatory requirements for financial transactions.

The Action

1. Review Dataverse security roles and privileges for entities related to subscription billing to ensure least privilege.
2. Assess integration points between Dynamics 365 CE and Finance and Operations for secure data transfer and access controls.
3. Implement auditing and logging for subscription contract creation, modification, and invoice generation.
4. Develop or update data loss prevention (DLP) policies to protect sensitive financial data within Dynamics 365.
5. Conduct a privacy impact assessment (PIA) for the new data processing activities related to subscription billing.

Domain: Other · Impact: medium · Workload: Other