AzPolicyAdvertizer

last sync: 2024-Nov-25 18:54:24 UTC

Microsoft Managed Control 1854 - Inventory of Personally Identifiable Information | Regulatory Compliance - Security

Azure BuiltIn Policy definition

Source

Azure Portal

Display name

Microsoft Managed Control 1854 - Inventory of Personally Identifiable Information

952a545c-6dc5-4999-aeb6-51ed27dc7ea5

Version

1.0.0
Details on versioning

Versioning

Versions supported for Versioning: 0
Built-in Versioning [Preview]

Category

Regulatory Compliance
Microsoft Learn

Description

Microsoft implements this Security control

Additional metadata

Name/Id: ACF1854 / Microsoft Managed Control 1854
Category: Security
Title: Inventory of Personally Identifiable Information - Programs/Systems Using PII
Ownership: Customer, Microsoft
Description: Establishes, maintains, and updates Annually an inventory that contains a listing of all programs and information systems identified as collecting, using, maintaining, or sharing personally identifiable information (PII); and
Requirements: Microsoft maintains the Data Inventory Implementation Guide which outlines standards for data inventories at Microsoft. The document requires that each privacy program create and maintain a data inventory, asset inventory, data flow diagrams, and governance documentation for data inventory, asset inventory and data flow diagrams. Azure implements these requirements using the Privacy Manager and Privacy Review process, ensuring the PII inventory is reviewed annually as part of the Privacy Review for each service. The reviews are conducted by Privacy Managers who are listed in the Privacy Manager tool, integrated with Service Tree.

Mode

Indexed

Type

Static

Preview

False

Deprecated

False

Effect

Fixed
audit

RBAC role(s)

none

Rule aliases

none

Rule resource types

IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups

Compliance

The following 1 compliance controls are associated with this Policy definition 'Microsoft Managed Control 1854 - Inventory of Personally Identifiable Information ' (952a545c-6dc5-4999-aeb6-51ed27dc7ea5)

Control Domain	Control	Name	MetadataId	Category	Title	Owner	Requirements	Description	Info	Policy#
	op.exp.1 Asset inventory	op.exp.1 Asset inventory	404 not found				n/a	n/a		40

Initiatives usage

Initiative DisplayName	Initiative Id	Initiative Category	State	Type
Spain ENS	175daf90-21e1-4fec-b745-7b4c909aa94c	Regulatory Compliance	GA	BuiltIn

History

Date/Time (UTC ymd) (i)	Change type	Change detail
2022-04-01 20:29:14	add	952a545c-6dc5-4999-aeb6-51ed27dc7ea5

JSON compare

n/a

JSON

api-version=2021-06-01
EPAC