last sync: 2024-Sep-19 17:51:32 UTC

Microsoft Managed Control 1584 - Information System Documentation | Regulatory Compliance - System and Services Acquisition

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1584 - Information System Documentation
Id 5864522b-ff1d-4979-a9f8-58bee1fb174c
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 0
Built-in Versioning [Preview]
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this System and Services Acquisition control
Additional metadata Name/Id: ACF1584 / Microsoft Managed Control 1584
Category: System and Services Acquisition
Title: Information System Documentation - Documentation Distribution to Define Personnel
Ownership: Customer, Microsoft
Description: The organization: Distributes documentation to Developer, Tester roles Also need to include ISSO or similar role.
Requirements: Azure service teams maintain, secure, manage, and store information system documentation, including documentation regarding: * Secure configuration, installation, and operation of the information system * Effective use and maintenance of security features/functions * Known vulnerabilities regarding configuration and use of administrative (i.e. privileged) functions This documentation is stored in each service team’s SharePoint site and made available to service team members. The documentation is secured via SharePoint's internal security mechanisms. Information system documentation is distributed to only the appropriate groups and individuals on a need to know basis and is based on job responsibilities. Documentation for externally-provided software (scanning tools) is available online at vendor websites.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance Not a Compliance control
Initiatives usage none
History none
JSON compare n/a
JSON
api-version=2021-06-01
EPAC