AzPolicyAdvertizer

last sync: 2024-Sep-18 17:50:24 UTC

Review security testing, training, and monitoring plans | Regulatory Compliance - Documentation

Azure BuiltIn Policy definition

Source

Azure Portal

Display name

Review security testing, training, and monitoring plans

c3b3cc61-9c70-5d78-7f12-1aefcc477db7

Version

1.1.0
Details on versioning

Versioning

Versions supported for Versioning: 1
1.1.0
Built-in Versioning [Preview]

Category

Regulatory Compliance
Microsoft Learn

Description

CMA_C1754 - Review security testing, training, and monitoring plans

Additional metadata

Name/Id: CMA_C1754 / CMA_C1754
Category: Documentation
Title: Review security testing, training, and monitoring plans
Ownership: Customer
Description: The customer is responsible for reviewing testing, training, and monitoring plans for consistency with the organizational risk management strategy and organization-wide priorities for risk response actions.
Requirements: The customer is responsible for implementing this recommendation.

Mode

All

Type

BuiltIn

Preview

False

Deprecated

False

Effect

Default
Manual
Allowed
Manual, Disabled

RBAC role(s)

none

Rule aliases

none

Rule resource types

IF (1)
Microsoft.Resources/subscriptions

Compliance

The following 1 compliance controls are associated with this Policy definition 'Review security testing, training, and monitoring plans' (c3b3cc61-9c70-5d78-7f12-1aefcc477db7)

Control Domain	Control	Name	MetadataId	Category	Title	Owner	Requirements	Description	Info	Policy#
hipaa	0108.02d1Organizational.23-02.d	hipaa-0108.02d1Organizational.23-02.d	0108.02d1Organizational.23-02.d	01 Information Protection Program	0108.02d1Organizational.23-02.d 02.03 During Employment	Shared	n/a	The organization ensures plans for security testing, training, and monitoring activities are developed, implemented, maintained, and reviewed for consistency with the risk management strategy and response priorities.		8

Initiatives usage

Initiative DisplayName	Initiative Id	Initiative Category	State	Type
HITRUST/HIPAA	a169a624-5599-4385-a696-c8d643089fab	Regulatory Compliance	GA	BuiltIn

History

Date/Time (UTC ymd) (i)	Change type	Change detail
2022-09-27 16:35:32	change	Minor (1.0.0 > 1.1.0)
2022-09-19 17:41:40	add	c3b3cc61-9c70-5d78-7f12-1aefcc477db7

JSON compare

compare mode: version left: version right:

JSON

api-version=2021-06-01
EPAC