AzPolicyAdvertizer

last sync: 2024-Sep-18 17:50:24 UTC

Microsoft Managed Control 1855 - Inventory of Personally Identifiable Information | Regulatory Compliance - Security

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1855 - Inventory of Personally Identifiable Information
Id 0a2119c1-f068-4bfe-9f03-db94317e8db9
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 0
Built-in Versioning [Preview]
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this Security control
Additional metadata Name/Id: ACF1855 / Microsoft Managed Control 1855
Category: Security
Title: Inventory of Personally Identifiable Information - Notify CIO or Official
Ownership: Customer, Microsoft
Description: Provides each update of the PII inventory to the stakeholders monthly to support the establishment of information security requirements for all new or modified information systems containing PII.
Requirements: Microsoft maintains the Data Inventory Implementation Guide which outlines standards for data inventories at Microsoft. The document requires that each privacy program create and maintain a data inventory, asset inventory, data flow diagrams, and governance documentation for data inventory, asset inventory and data flow diagrams. Azure implements these requirements using the Privacy Manager and Privacy Review process, ensuring the PII inventory is reviewed annually as part of the Privacy Review for each service. The reviews are conducted by Privacy Managers who are listed in the Privacy Manager tool, integrated with Service Tree.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance
The following 1 compliance controls are associated with this Policy definition 'Microsoft Managed Control 1855 - Inventory of Personally Identifiable Information ' (0a2119c1-f068-4bfe-9f03-db94317e8db9)
Control Domain Control Name MetadataId Category Title Owner Requirements Description Info Policy#
op.exp.1 Asset inventory op.exp.1 Asset inventory 404 not found n/a n/a 40
Initiatives usage
Initiative DisplayName Initiative Id Initiative Category State Type
Spain ENS 175daf90-21e1-4fec-b745-7b4c909aa94c Regulatory Compliance GA BuiltIn
History
Date/Time (UTC ymd) (i) Change type Change detail
2022-04-01 20:29:14 add 0a2119c1-f068-4bfe-9f03-db94317e8db9
JSON compare n/a
JSON
api-version=2021-06-01
EPAC