Dynamics 365 Field Service: Track costs for non-billable field work

🚨 The Signal: Dynamics 365 Field Service now tracks costs for non-billable work by linking work orders to projects. This change improves financial visibility for internal operations but introduces new data flows that require careful access control.

The Impact

Financial and operational teams are affected, with a low security risk if data access is not properly managed.

• Financial teams: New cost data is exposed, risking unauthorised access if permissions are not reviewed.
• Operational teams: Work order data now links to financial projects, increasing data sensitivity.
• Security teams: Must ensure least privilege is applied to new project-linked work order data.
• Compliance teams: Need to verify data handling aligns with ISM for financial and operational data.

The Action

1. Review existing Dynamics 365 Field Service security roles and permissions for work orders.
2. Identify users with access to project-related financial data within Dynamics 365.
3. Implement or update security roles to enforce least privilege for non-billable work order and project data.
4. Verify data classification and retention policies for newly linked financial and operational data.
5. Conduct an internal audit of access logs for project-linked work orders post-implementation.

Domain: Other · Impact: medium · Workload: Other