last sync: 2024-Sep-19 17:51:32 UTC

Microsoft Managed Control 1519 - Personnel Termination | Regulatory Compliance - Personnel Security

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1519 - Personnel Termination
Id 2f13915a-324c-4ab8-b45c-2eefeeefb098
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 0
Built-in Versioning [Preview]
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this Personnel Security control
Additional metadata Name/Id: ACF1519 / Microsoft Managed Control 1519
Category: Personnel Security
Title: Personnel Termination - Retain Access to Systems Formerly Controlled by Personnel
Ownership: Customer, Microsoft
Description: The organization, upon termination of individual employment: Retains access to organizational information and information systems formerly controlled by terminated individual; and
Requirements: Microsoft retains information formerly controlled by terminated individual on file servers and SQL/SharePoint as part of the Data Protection Services’ (DPS) disaster recovery retention for ninety (90) days. Additionally, managers can also gain access to workstations{{RX accounts}} of terminated personnel after HR has approved the requested access.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance Not a Compliance control
Initiatives usage none
History none
JSON compare n/a
JSON
api-version=2021-06-01
EPAC