last sync: 2024-Nov-25 18:54:24 UTC

Microsoft Managed Control 1600 - Developer Security Testing And Evaluation | Regulatory Compliance - System and Services Acquisition

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1600 - Developer Security Testing And Evaluation
Id c53f3123-d233-44a7-930b-f40d3bfeb7d6
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 0
Built-in Versioning [Preview]
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this System and Services Acquisition control
Additional metadata Name/Id: ACF1600 / Microsoft Managed Control 1600
Category: System and Services Acquisition
Title: Developer Security Testing And Evaluation - Create And Implement Security Assessment Plan
Ownership: Customer, Microsoft
Description: The organization requires the developer of the information system, system component, or information system service to: Create and implement a security assessment plan;
Requirements: Azure develops security assessment plans in accordance with Microsoft's Security Development Lifecycle (SDL) process. Security testing occurs during the following phases of the process: * Phase 3 – Implementation * Phase 4 – Verification * Phase 5 – Release
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance Not a Compliance control
Initiatives usage none
History none
JSON compare n/a
JSON
api-version=2021-06-01
EPAC