# Power Platform and AI Agent Security (Webinar) | AvantIT > Who secures the apps, flows and agents your business users build? AvantIT and FRCI webinar on identity, data, connectors and governance. Canonical: https://www.avantit.pt/en/blog/new-microsoft-security-challenge-citizen-developers/ Source: AvantIT — https://www.avantit.pt (Microsoft Partner, Matosinhos, Portugal) --- [Back to blog](https://www.avantit.pt/en/blog/) ![Power Platform governance and security overview for citizen development] [Governance and Security](https://www.avantit.pt/en/blog/category/governance-security/) # The New Microsoft Security Challenge: Who Secures What Your Citizen Developers Build? ![AvantIT Team] AvantIT Team 2026-10-12 5 Your company may have far more developers than you think. They may not have "Developer" in their job title, but they are building Power Apps, automating processes with Power Automate, creating Power BI dashboards, connecting systems and, increasingly, using AI and agents to solve business problems. Microsoft Power Platform has made software development accessible to everyone. But there is another side to that story: who is responsible for securing everything being built? ## Watch the session This is Part 1 of The New Microsoft Security Challenge , a two-part webinar series from AvantIT and FRCI, first presented as Your Company Has Hundreds of Developers. You Just Don’t Know It Yet. The series continues live in Lisbon on 23 October: [see the conference](https://www.avantit.pt/en/webinars/build-govern-defend-lisbon/). Prefer YouTube? [Watch it there](https://youtu.be/cPKZaI05Mfw) and subscribe to the [AvantIT channel](https://www.youtube.com/@AvantIT). ## Why this is a security problem, not just an IT one In the traditional model, software was built by a small group of developers, reviewed by IT and released through a controlled process. That model is gone. Today a finance analyst can build an approval app on a Friday afternoon, connect it to SharePoint and a third-party service, and share it with the whole department before Monday. Nothing about that is wrong in itself. Citizen development is how many organisations finally clear their process backlog. The risk is that applications and automations multiply faster than anyone’s ability to see them : who owns them, what data they touch, which identity they run as, and what happens when the author leaves. ## What the session covers - How the traditional software development model is changing - Why business users are becoming citizen developers - The building blocks of Microsoft Power Platform - How business problems become software - The applications and automations already inside organisations - Identity, data, connectors, governance and lifecycle - The new enterprise attack surface - How IT, business and security need to work together ## The new enterprise attack surface Every Power App, flow or agent is a small piece of software with an identity, access to data and connections to other systems. Multiply that by hundreds of makers and the questions pile up: - Identity: whose credentials does a flow run under, and does it survive a leaver or a role change? - Data: which sources can be combined, and can business data end up in a consumer service through a connector? - Connectors: are DLP policies in place, and do they match how your teams actually work? - Lifecycle: who reviews, updates and retires what has been built? - AI and agents: what can an agent read and do on a user’s behalf, and who approved that? For the practical side of the first four, our guide to [Power Apps security and governance for CTOs](https://www.avantit.pt/en/blog/power-apps-security-guide-ctos/) goes deeper on DLP, access control and GDPR. ## One question to take back to your organisation What exactly is being built inside your organisation? If you cannot answer that with an inventory rather than a guess, that is the place to start. IT, the business and security each hold part of the answer, and none of them can secure what they cannot see. ## Part 2: AI-powered email threats with FRCI The series continued with Part 2, delivered by FRCI on 1 October , which explored AI-powered email threats and Microsoft Defender for Office 365. [Read the Part 2 write-up](https://www.avantit.pt/en/blog/email-threat-has-changed-defender-for-office-365/). Together, the two parts cover both sides of the challenge: what you are building, and what is coming in through the front door. ## Want to know what is already running in your tenant? AvantIT helps organisations take stock of their Power Platform estate and put governance in place without slowing makers down. [Talk to our team](https://www.avantit.pt/en/contact/) or explore our [Power Platform services](https://www.avantit.pt/en/services/power-platform/). #### Editorial Policy At Avantit, we value authenticity and human expertise. This article was written and reviewed by our experts, ensuring technical accuracy grounded in real-world projects. We do not publish content generated exclusively by AI without validation by one of our consultants. ### Share and Comment Share: [Comment on LinkedIn](https://linkedin.com/company/avantitlda) ### Related Topics Microsoft security challenge citizen developers security Power Platform security Power Platform governance AI agents security shadow IT Power Apps Microsoft Defender for Office 365 ## Keep reading More articles on this topic. [The Email Threat Has Changed. Has Your Defence? AI-Powered Phishing and Defender for Office 365 AI is making phishing, impersonation and Business Email Compromise more convincing. Part 2 of The New Microsoft Security Challenge, by FRCI, covers Microsoft Defender for Office 365. 4](https://www.avantit.pt/en/blog/email-threat-has-changed-defender-for-office-365/)[File and Version Chaos in Teams: The Invisible Cost Slowing Your Team Down Duplicate files, lost versions and "which one is the final document?" in Microsoft Teams cost time and money. Discover where the problem comes from and how to solve it strategically. 11 min](https://www.avantit.pt/en/blog/teams-file-chaos-versioning/)[Copilot Without Governance: The Risks of Adopting AI With No Policy Many companies scale Microsoft Copilot and create hundreds of agents with no inventory, no lifecycle and no data policy. Here are the real governance risks — and how to fix them. 10 min](https://www.avantit.pt/en/blog/copilot-governance-adoption-without-policy/) [See every article on Governance and Security](https://www.avantit.pt/en/blog/category/governance-security/) If this sounds familiar because it is your problem, not just curiosity: [Copilot governance and adoption](https://www.avantit.pt/en/services/data-ai/) ### Enjoyed this article? Subscribe to our newsletter to receive more content like this or contact us to learn how we can implement these solutions in your company. ### Send us a message Fill out the form below and we will get back to you shortly. Name Email Company Phone Role ( optional ) Select Executive / Board IT / Technology Finance Operations Human Resources Marketing / Sales Other Company size ( optional ) Select 1-5 employees 5-25 employees 25-50 employees 50-100 employees 100-500 employees 500-1000 employees 1000+ employees Service of Interest Select a service Software Development SharePoint Intranets Power Platform Data & AI Consulting Support Message I would like to occasionally receive AvantIT content about Microsoft 365, Power Platform and automation. We use your details only to answer this enquiry. [Privacy Policy](https://www.avantit.pt/en/privacy/) Send Message ### Looking for something? ### Most Read 01 [An Intranet in Days, Not Months: How SharePoint Templates Accelerate Implementation](https://www.avantit.pt/en/blog/sharepoint-templates-fast-intranet/) 02 [The Hidden Cost of Manual Data Entry: What CFOs Need to Know](https://www.avantit.pt/en/blog/hidden-cost-manual-data-entry-cfos/) ### Weekly Tip Use o Power Toys no Windows para extrair texto de qualquer imagem com o atalho Win+Shift+T . Aumenta a produtividade em 30%! ### Categories - [SharePoint 8](https://www.avantit.pt/en/blog/category/sharepoint/) - [Governance and Security 7](https://www.avantit.pt/en/blog/category/governance-security/) - [Power Platform 6](https://www.avantit.pt/en/blog/category/power-platform/) - [Business Strategy 4](https://www.avantit.pt/en/blog/category/business-strategy/) - [AI and Automation 3](https://www.avantit.pt/en/blog/category/ai-automation/) - [Modern Work 2](https://www.avantit.pt/en/blog/category/modern-work/) - [Data and Analytics 2](https://www.avantit.pt/en/blog/category/data-analytics/) - [Engineering 1](https://www.avantit.pt/en/blog/category/engineering/) ### Hot Topics #CoPilot #Power Platform #Security #SharePoint #AI #Teams ### Editorial Calendar - FEV 02 Disponível Segurança em Power Apps: Guia para CTOs - FEV 05 Disponível Custo oculto da entrada manual de dados - FEV 09 Planeado Quanto custam processos manuais à sua empresa ### Precisa de ajuda especializada? Complex project? Get a free 30min consultancy. [Agendar agora](https://www.avantit.pt/en/contact/)