Applying controls to protect the consumption of Power Platform is an important part, but it is sometimes not enough. It's why I spent some time presenting how Microsoft Purview Compliance could be a key solution in your security and compliance processes related to Power Platform: https://medium.com/raphaël-pothin/power-platforms-protection-microsoft-purview-compliance-d8d5b5ecc2d4