Dynamics 365 Project Operations: Optimize Project Operations - Support subscription billing for Project Operations

🚨 The Signal: Dynamics 365 Project Operations now supports subscription billing. This automates recurring invoicing and integrates with finance systems, potentially increasing the attack surface for financial data if not properly secured.

The Impact

Admins and Security Teams are affected by new financial data flows, increasing risk of data integrity issues or unauthorised access if not properly secured.

• Admins: Must configure new billing features securely to prevent data exposure.
• Security Teams: Need to assess new data flows for financial data integrity and access controls.
• Finance Teams: Rely on secure configuration to ensure accurate and protected billing data.
• Auditors: Will need to verify controls around automated financial processes.

The Action

1. Review Dynamics 365 security roles and permissions for users accessing subscription billing features.
2. Implement least privilege access for all accounts interacting with financial data in Project Operations.
3. Configure audit logging for subscription billing activities and financial transactions.
4. Validate data integration points between Project Operations and finance systems for secure data transfer.
5. Conduct a privacy impact assessment (PIA) and security risk assessment (SRA) for the new financial data processing.

Domain: Other · Impact: medium · Workload: Other