AzPolicyAdvertizer

last sync: 2024-Sep-18 17:50:24 UTC

Microsoft Managed Control 1806 - Governance And Privacy Program | Regulatory Compliance - Accountability, Audit, and Risk Management

Azure BuiltIn Policy definition

Source

Azure Portal

Display name

Microsoft Managed Control 1806 - Governance And Privacy Program

956b00aa-7977-4214-a0f5-e0428c1f9bff

Version

1.0.0
Details on versioning

Versioning

Versions supported for Versioning: 0
Built-in Versioning [Preview]

Category

Regulatory Compliance
Microsoft Learn

Description

Microsoft implements this Accountability, Audit, and Risk Management control

Additional metadata

Name/Id: ACF1806 / Microsoft Managed Control 1806
Category: Accountability, Audit, and Risk Management
Title: Governance And Privacy Program - Operational Privacy Policies/Procedures
Ownership: Customer, Microsoft
Description: Develops, disseminates, and implements operational privacy policies and procedures that govern the appropriate privacy and security controls for programs, information systems, or technologies involving PII; and
Requirements: The Microsoft Privacy Standard and Privacy Policy are stored on Liquid, Microsoft's document repository. All Microsoft personnel have access to Liquid. The Azure Privacy Standard Operating Procedure (SOP) is maintained on a secure SharePoint site. All Azure personnel have read access to the SharePoint repository, but the Privacy team is the only team with write privileges for the privacy SOP. When updates are made to the privacy SOP, an email notification is generated informing personnel that changes have occurred.

Mode

Indexed

Type

Static

Preview

False

Deprecated

False

Effect

Fixed
audit

RBAC role(s)

none

Rule aliases

none

Rule resource types

IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups

Compliance

The following 1 compliance controls are associated with this Policy definition 'Microsoft Managed Control 1806 - Governance And Privacy Program ' (956b00aa-7977-4214-a0f5-e0428c1f9bff)

Control Domain	Control	Name	MetadataId	Category	Title	Owner	Requirements	Description	Info	Policy#
	op.pl.1 Risk analysis	op.pl.1 Risk analysis	404 not found				n/a	n/a		70

Initiatives usage

Initiative DisplayName	Initiative Id	Initiative Category	State	Type
Spain ENS	175daf90-21e1-4fec-b745-7b4c909aa94c	Regulatory Compliance	GA	BuiltIn

History

Date/Time (UTC ymd) (i)	Change type	Change detail
2022-04-01 20:29:14	add	956b00aa-7977-4214-a0f5-e0428c1f9bff

JSON compare

n/a

JSON

api-version=2021-06-01
EPAC