last sync: 2024-Sep-18 17:50:24 UTC

Microsoft Managed Control 1364 - Incident Handling | Dynamic Reconfiguration | Regulatory Compliance - Incident Response

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1364 - Incident Handling | Dynamic Reconfiguration
Id 4c615c2a-dc83-4dda-8220-abce7b50c9bc
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 0
Built-in Versioning [Preview]
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this Incident Response control
Additional metadata Name/Id: ACF1364 / Microsoft Managed Control 1364
Category: Incident Response
Title: Incident Handling | Dynamic Reconfiguration
Ownership: Customer, Microsoft
Description: The organization includes dynamic reconfiguration of All network, data storage, and computing devices as part of the incident response capability.
Requirements: Azure personnel are able to access network, data storage, and computing devices within the system and change their configuration as required during the incident management process, up to and including updating firewall rules, restricting network access, removing users, and more. The Security Response Team maintains the capability to dynamically reconfigure information system components as outlined in the Rapid Containment Protocol section of the C+AI Security Playbooks. Capabilities include the ability to disable accounts, change ACLs and quarantine assets if determined necessary in an incident management scenario.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance
The following 1 compliance controls are associated with this Policy definition 'Microsoft Managed Control 1364 - Incident Handling | Dynamic Reconfiguration' (4c615c2a-dc83-4dda-8220-abce7b50c9bc)
Control Domain Control Name MetadataId Category Title Owner Requirements Description Info Policy#
op.exp.7 Incident management op.exp.7 Incident management 404 not found n/a n/a 103
Initiatives usage
Initiative DisplayName Initiative Id Initiative Category State Type
Spain ENS 175daf90-21e1-4fec-b745-7b4c909aa94c Regulatory Compliance GA BuiltIn
History none
JSON compare n/a
JSON
api-version=2021-06-01
EPAC