AzPolicyAdvertizer

last sync: 2024-Sep-18 17:50:24 UTC

Microsoft Managed Control 1854 - Inventory of Personally Identifiable Information | Regulatory Compliance - Security

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1854 - Inventory of Personally Identifiable Information
Id 952a545c-6dc5-4999-aeb6-51ed27dc7ea5
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 0
Built-in Versioning [Preview]
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this Security control
Additional metadata Name/Id: ACF1854 / Microsoft Managed Control 1854
Category: Security
Title: Inventory of Personally Identifiable Information - Programs/Systems Using PII
Ownership: Customer, Microsoft
Description: Establishes, maintains, and updates Annually an inventory that contains a listing of all programs and information systems identified as collecting, using, maintaining, or sharing personally identifiable information (PII); and
Requirements: Microsoft maintains the Data Inventory Implementation Guide which outlines standards for data inventories at Microsoft. The document requires that each privacy program create and maintain a data inventory, asset inventory, data flow diagrams, and governance documentation for data inventory, asset inventory and data flow diagrams. Azure implements these requirements using the Privacy Manager and Privacy Review process, ensuring the PII inventory is reviewed annually as part of the Privacy Review for each service. The reviews are conducted by Privacy Managers who are listed in the Privacy Manager tool, integrated with Service Tree.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance
The following 1 compliance controls are associated with this Policy definition 'Microsoft Managed Control 1854 - Inventory of Personally Identifiable Information ' (952a545c-6dc5-4999-aeb6-51ed27dc7ea5)
Control Domain Control Name MetadataId Category Title Owner Requirements Description Info Policy#
op.exp.1 Asset inventory op.exp.1 Asset inventory 404 not found n/a n/a 40
Initiatives usage
Initiative DisplayName Initiative Id Initiative Category State Type
Spain ENS 175daf90-21e1-4fec-b745-7b4c909aa94c Regulatory Compliance GA BuiltIn
History
Date/Time (UTC ymd) (i) Change type Change detail
2022-04-01 20:29:14 add 952a545c-6dc5-4999-aeb6-51ed27dc7ea5
JSON compare n/a
JSON
api-version=2021-06-01
EPAC