SMCPS

Free SMCPS diagnostic

Is your Power Platform and Microsoft 365 estate safe to scale?

Use these 20 questions to identify where ownership, information, permissions, support or delivery controls may be weaker than they need to be.

This is not a compliance certification. It is a structured conversation starter for leaders who need a clearer view of what is fragile, what is owned and what to fix first.

For each question, mark Yes, Partly or No. The “No” answers are not automatically failures. They show where a decision, owner or control may need attention.

Use the result

Group your answers under ownership, risk, information, support and delivery. The pattern matters more than the total score.

01

Do we know which Power Apps and Power Automate flows are business-critical?

02

Does every production solution have a named business owner and technical owner?

03

Can we identify which environments are used for development, testing and production?

04

Are environment creation and access controlled through an agreed process?

05

Do we know where sensitive or regulated information is being processed?

06

Are connectors, custom connectors and data movement reviewed before use?

07

Are permissions based on a clear role or business need?

08

Can we remove access promptly when someone changes role or leaves?

09

Do SharePoint sites and Teams have owners who understand their responsibilities?

10

Can users find the information they need without relying on personal workarounds?

11

Is there a consistent approach to naming, lifecycle and retention?

12

Do we know which flows fail most often and who responds when they do?

13

Is there a support route for users when a low-code solution stops working?

14

Are changes tested before they affect operational users?

15

Can we distinguish a prototype from a supported business service?

16

Do we have a prioritised backlog of risks and improvements?

17

Are governance decisions recorded in a way delivery teams can use?

18

Do leaders receive evidence of risk, adoption and service health?

19

Have we considered the information and permission foundations for Copilot or AI agents?

20

Is there a 90-day plan with named owners and realistic sequencing?

What to do next

Turn the pattern into a practical 90-day plan.

If several answers are “Partly” or “No”, a focused governance review can help identify the material risks, agree ownership and sequence the work. You do not need a perfect estate before starting. You need an honest baseline.