Security Governance Framework for Low-code/No-code Development
No-code/Low-code puts new technology in the hands of every person in an organization.
Unfortunately, many of these employees are not tech savvy and lack security training and awareness. In this document, we describe a recommended security governance framework for low-code/no-code (LCNC) applications and automations, such as those developed on Microsoft Power Platform.
The framework covers:
- Governance practices and processes
- Risk assessment
- Threat protection
- Risk assessment
- Roles and responsibilities
- Framework implementation
