I'm currently redesigning the intake form for Apps and Flows outside of the default environment, and I'm interested in learning about the questions you typically ask in your form. Once the form is submitted, we arrange a meeting with the client and our security office to discuss the app or flow's design and data usage. If anyone is willing to share insights about their post-submission process, it would be greatly appreciated. Thank you!
For us we have one section for acknowledgement.
- Confirm that the app/flow will not use Personal Sensitive or Personal Confidential Data
- Confirm that the app/flow does not need to be FDA Validated
- Confirm that data from the app/flow will not be shared outside of the company
- Information Classification
General Info
- Project name
- App Owner
- Tech Lead
- Estimated Users
- Platform Type - PowerApps - Automate - Automate Desktop (We don't have the other areas available yet. )
- Multi text field for additional info
- Attachment field for the design
- Region
- Gateway (Yes/No)
- Storage location (SharePoint, onprem sql, SharePoint, etc.)