| Source | Azure Portal | ||||||
| Display name | Microsoft Managed Control 1726 - Information Output Handling And Retention | ||||||
| Id | baff1279-05e0-4463-9a70-8ba5de4c7aa4 | ||||||
| Version | 1.0.1 Details on versioning |
||||||
| Versioning |
Versions supported for Versioning: 0 Built-in Versioning [Preview] |
||||||
| Category | Regulatory Compliance Microsoft Learn |
||||||
| Description | Microsoft implements this System and Information Integrity control | ||||||
| Additional metadata |
Name/Id: ACF1726 / Microsoft Managed Control 1726 Category: System and Information Integrity Title: Information Output Handling And Retention Ownership: Customer, Microsoft Description: The organization handles and retains information within the information system and information output from the system in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and operational requirements. Requirements: Azure assets are retained as appropriate based on retention requirements set by Corporate Records Management and an asset’s classification or based on contractual requirements. The Microsoft Asset Classification Standard, Data Classification Standard, and Asset Protection Standard describe the minimum security requirements that Azure personnel must apply to information assets based on their classification, including Low Value Asset (LVA), Moderate Value Asset (MVA), and High Value Asset (HVA). The Corporate Document Retention Schedule describes which Microsoft documents must be kept and for how long. Microsoft guarantees retention of customer data for thirty (30) days after termination. All information is permanently deleted ninety (90) days after termination of service. All Azure personnel responsible for managing and maintaining Azure assets ensure that assets are handled securely and provided with appropriate level of protection in accordance with the Asset Classification Standard, Data Classification Standard, and Asset Protection Standard. Microsoft assets are handled and retained in the following manner: * Information system documentation is accessible to Microsoft personnel via internal SharePoint sites. Individual service teams utilizing SharePoint are responsible for managing access to their own sites. * Operations assets are retained as appropriate based on retention requirements set by Corporate Records Management and the asset’s classification as document within the Asset Classification and Asset Protection Standards. * Operations assets are disposed of in accordance with the asset’s retention requirements as set by Corporate Records Management. |
||||||
| Mode | Indexed | ||||||
| Type | Static | ||||||
| Preview | False | ||||||
| Deprecated | False | ||||||
| Effect | Fixed audit |
||||||
| RBAC role(s) | none | ||||||
| Rule aliases | none | ||||||
| Rule resource types | IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups |
||||||
| Compliance | Not a Compliance control | ||||||
| Initiatives usage | none | ||||||
| History |
|
||||||
| JSON compare |
compare mode:
version left:
version right:
|
||||||
| JSON |
|