last sync: 2024-Nov-25 18:54:24 UTC

Microsoft Managed Control 1688 - Information System Monitoring | Regulatory Compliance - System and Information Integrity

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1688 - Information System Monitoring
Id 063c3f09-e0f0-4587-8fd5-f4276fae675f
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 0
Built-in Versioning [Preview]
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this System and Information Integrity control
Additional metadata Name/Id: ACF1688 / Microsoft Managed Control 1688
Category: System and Information Integrity
Title: Information System Monitoring - Legal Opinion in Accordance with Federal Laws/Policies
Ownership: Customer, Microsoft
Description: The organization: Obtains legal opinion with regard to information system monitoring activities in accordance with applicable federal laws, Executive Orders, directives, policies, or regulations; and
Requirements: Azure Security and the Security Response Team, in consultation with Corporate, External, and Legal Affairs (CELA), defines a set of log events and alerts that meet federal regulatory requirements for incident management and investigation. This structure is intended to support identification of known suspicious activity and to support the investigation of misuse and abuse of Azure services. To comply fully with applicable regulations, Azure service teams follow defined requirements for event collection and notification processes.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance Not a Compliance control
Initiatives usage none
History none
JSON compare n/a
JSON
api-version=2021-06-01
EPAC