Dynamics 365 Project Operations: Optimize Project Operations - Import projects in MPP files into existing projects

🚨 The Signal: Dynamics 365 Project Operations now allows importing Microsoft Project (.mpp) files into existing projects, not just new ones. This streamlines project setup but introduces a new vector for data modification.

The Impact

Project managers and administrators are affected, with a moderate risk of unintended data modification or integrity issues if controls are not reviewed.

• Project Managers: Risk of overwriting or corrupting existing project data if imports are not carefully managed.
• Administrators: Need to review and potentially update access policies for project import capabilities.
• Security Teams: Must ensure data integrity controls are robust for this new import functionality.
• Compliance Officers: Requires verification that data handling processes align with regulatory requirements.

The Action

1. Review Dynamics 365 security roles and permissions for users with 'Project Operations' access.
2. Verify that only authorised personnel have permissions to import .mpp files into existing projects.
3. Implement or reinforce change management processes for project data modifications via import.
4. Educate users on the implications of importing .mpp files into existing projects, especially data overwrite risks.
5. Audit logs for project import activities should be regularly reviewed for anomalous behaviour.

Domain: Other · Impact: medium · Workload: Other