AzPolicyAdvertizer

last sync: 2024-Sep-18 17:50:24 UTC

Microsoft Managed Control 1809 - Privacy Impact And Risk Assessment | Regulatory Compliance - Accountability, Audit, and Risk Management

Azure BuiltIn Policy definition

Source

Azure Portal

Display name

Microsoft Managed Control 1809 - Privacy Impact And Risk Assessment

6b04f815-52d7-4ff6-94bf-a4f22c07d5ae

Version

1.0.0
Details on versioning

Versioning

Versions supported for Versioning: 0
Built-in Versioning [Preview]

Category

Regulatory Compliance
Microsoft Learn

Description

Microsoft implements this Accountability, Audit, and Risk Management control

Additional metadata

Name/Id: ACF1809 / Microsoft Managed Control 1809
Category: Accountability, Audit, and Risk Management
Title: Privacy Impact And Risk Assessment - PIA in Accordance with Laws/Policies
Ownership: Customer, Microsoft
Description: Conducts Privacy Impact Assessments (PIAs) for information systems, programs, or other activities that pose a privacy risk in accordance with applicable law, OMB policy, or any existing organizational policies and procedures.
Requirements: A Privacy Impact Assessment (PIA) is conducted as a part of the initial assessment process. The PIA is conducted by Azure to determine the type and amount of sensitive, private data about individuals that is in or flowing through its system. Azure audits its own processes and sees how these processes affect or might compromise the privacy of the individuals whose data it holds, collects, or processes. The PIA is reviewed and updated on an annual basis.

Mode

Indexed

Type

Static

Preview

False

Deprecated

False

Effect

Fixed
audit

RBAC role(s)

none

Rule aliases

none

Rule resource types

IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups

Compliance

The following 1 compliance controls are associated with this Policy definition 'Microsoft Managed Control 1809 - Privacy Impact And Risk Assessment ' (6b04f815-52d7-4ff6-94bf-a4f22c07d5ae)

Control Domain	Control	Name	MetadataId	Category	Title	Owner	Requirements	Description	Info	Policy#
	op.pl.1 Risk analysis	op.pl.1 Risk analysis	404 not found				n/a	n/a		70

Initiatives usage

Initiative DisplayName	Initiative Id	Initiative Category	State	Type
Spain ENS	175daf90-21e1-4fec-b745-7b4c909aa94c	Regulatory Compliance	GA	BuiltIn

History

Date/Time (UTC ymd) (i)	Change type	Change detail
2022-04-01 20:29:14	add	6b04f815-52d7-4ff6-94bf-a4f22c07d5ae

JSON compare

n/a

JSON

api-version=2021-06-01
EPAC