last sync: 2024-Nov-25 18:54:24 UTC

Microsoft Managed Control 1460 - Access Control For Output Devices | Regulatory Compliance - Physical and Environmental Protection

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1460 - Access Control For Output Devices
Id 6f3ce1bb-4f77-4695-8355-70b08d54fdda
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 0
Built-in Versioning [Preview]
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this Physical and Environmental Protection control
Additional metadata Name/Id: ACF1460 / Microsoft Managed Control 1460
Category: Physical and Environmental Protection
Title: Access Control For Output Devices
Ownership: Microsoft
Description: The organization controls physical access to information system output devices to prevent unauthorized individuals from obtaining the output.
Requirements: Azure datacenters do not have output devices (monitors, printers, audio devices, etc.) permanently connected to Azure assets or Azure shared assets. In addition to not having output devices, security officers perform physical walkthroughs of the facility multiple times per shift checking for items like doors being locked and racks being secured. Datacenter access is limited to people who have approved access authorizations. Colocations require multifactor authentication (access badge and biometrics) to gain access.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance Not a Compliance control
Initiatives usage none
History none
JSON compare n/a
JSON
api-version=2021-06-01
EPAC