last sync: 2024-Sep-19 17:51:32 UTC

Microsoft Managed Control 1587 - External Information System Services | Regulatory Compliance - System and Services Acquisition

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1587 - External Information System Services
Id 32820956-9c6d-4376-934c-05cd8525be7c
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 0
Built-in Versioning [Preview]
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this System and Services Acquisition control
Additional metadata Name/Id: ACF1587 / Microsoft Managed Control 1587
Category: System and Services Acquisition
Title: External Information System Services - Documenting Government Oversight
Ownership: Customer, Microsoft
Description: The organization: Defines and documents government oversight and user roles and responsibilities with regard to external information system services; and
Requirements: Azure signs ISAs with external information systems; ISAs define Azure oversight and roles/responsibilities. Agencies receive and review ISAs as part of their authorization decision. Government oversight is performed by this agency review of Azure ISAs and continuous monitoring, which includes reports on ISA oversight.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance Not a Compliance control
Initiatives usage none
History none
JSON compare n/a
JSON
api-version=2021-06-01
EPAC