“Six pillars, each owned by the role best positioned to operate it — that is SHIELD’s design principle.”
Power Platform’s accessibility — the feature that makes it valuable — is also what makes security non-negotiable. Hundreds of connectors, AI capabilities at every layer, and self-service development by hundreds of users simultaneously create a security surface that a traditional perimeter model cannot address alone.
The Six Pillars
Sight — Identity and access governance. Who is allowed in, through which door, and for how long. Harden — Data classification and Data Loss Prevention design. Safety from systems, not intentions. Inspect — Risk-based application security review. Not every solution needs a six-week review. Enforce — Audit logging and compliance evidence. Compliance as a continuous state, not an annual event. Lockdown — Environment isolation and network controls. The environment as a security perimeter. Defend — Threat detection and incident response. The feedback loop that improves posture over time.
What Power Platform Provides
Microsoft Entra ID for Sight. Microsoft Purview and Dataverse security for Harden. Solution Checker and pre-approval models for Inspect. Power Platform Admin Center audit logs and Purview Compliance Portal for Enforce. Managed Environments and IP firewall for Lockdown. Microsoft Sentinel for Defend.
The Enterprise Gap
No single role operates all six pillars. Security distributed across the right roles — identity governance to the identity team, data classification to the data governance team, threat detection to the security operations centre — is more resilient than security concentrated in one function that becomes a bottleneck.
One Action
Map each SHIELD pillar to its primary operating role in the current organisation. Identify any pillar with no clear owner. A pillar without an owner is a governance gap regardless of the tooling available.
Part 26 of 36 | #PowerPlatformAtScale
The full SHIELD framework, including the security baseline controls and pillar ownership model, are in the book.