No-code/Low-code puts new technology in the hands of every person in an organization. Unfortunately, many of these employees are not tech savvy and lack security training and awareness. In this document, we describe a recommended security governance framework for low-code/no-code (LCNC) applications and automations, such as those developed on Microsoft Power Platform.