Monitoring and audit
Audit logs on, alerts routed and someone watching.
17checks
In short
Monitoring and audit is one of the 11 core modules in The Governor, Ustrema's governance app for Microsoft Power Platform, Copilot Studio and agents. It runs 17 checks every week to answer one question: If something went wrong last month, would we know? Every failing check becomes a finding with an owner, closed with Microsoft Purview Audit, Microsoft Sentinel, Defender for Cloud Apps, Application Insights.
The question it answers
If something went wrong last month, would we know?
What it measures
Each of the 17 checks looks for patterns like these, in every environment, every week:
- Dataverse auditing off in production
- Conversation audit off for agents
- Agents with jailbreak or prompt-injection detections
- No connection to Sentinel or Defender
What you get
Once the findings are closed and the controls are in place, your tenant has:
- Audit settings that match your policy
- Alerts that reach a person
- Optional Platform Monitoring extension module: issues from every monitored environment, with a weekday digest
Microsoft services it works with
The Governor checks that these Microsoft controls are on, and our experts configure them:
- Microsoft Purview Audit
- Microsoft Sentinel
- Defender for Cloud Apps
- Application Insights
Questions about this module
Is Monitoring and audit included in the platform licence?
Yes. All 11 core modules, Monitoring and audit included, come with one platform licence per tenant per year. There are no per-user fees. Extension modules are added separately.
How often does The Governor check monitoring and audit?
Every week. The scan runs inside your own tenant, measures all 17 checks again and shows what closed, what is still open and what came back since the last scan.
Which Microsoft services does it work with?
Microsoft Purview Audit, Microsoft Sentinel, Defender for Cloud Apps, Application Insights. The Governor checks that they are switched on and configured, and Ustrema consultants set them up when they are not.
Sources
The primary documentation and law this page relies on. Each link opens the original source.