AzPolicyAdvertizer

last sync: 2024-Sep-18 17:50:24 UTC

Microsoft Managed Control 1808 - Privacy Impact And Risk Assessment | Regulatory Compliance - Accountability, Audit, and Risk Management

Azure BuiltIn Policy definition

Source

Azure Portal

Display name

Microsoft Managed Control 1808 - Privacy Impact And Risk Assessment

cd6120c1-d069-416d-9753-fbe84bca4b01

Version

1.0.0
Details on versioning

Versioning

Versions supported for Versioning: 0
Built-in Versioning [Preview]

Category

Regulatory Compliance
Microsoft Learn

Description

Microsoft implements this Accountability, Audit, and Risk Management control

Additional metadata

Name/Id: ACF1808 / Microsoft Managed Control 1808
Category: Accountability, Audit, and Risk Management
Title: Privacy Impact And Risk Assessment - Assess Individual Risk
Ownership: Customer, Microsoft
Description: Documents and implements a privacy risk management process that assesses privacy risk to individuals resulting from the collection, sharing, storing, transmitting, use, and disposal of personally identifiable information (PII); and
Requirements: A Privacy Impact Assessment (PIA) is conducted as a part of the assessment process. The PIA is conducted by Azure to determine the type and amount of sensitive, private data about individuals that is in or flowing through its system. Azure audits its own processes and sees how these processes affect or might compromise the privacy of the individuals whose data it holds, collects, or processes. The PIA is reviewed and updated on an annual basis.

Mode

Indexed

Type

Static

Preview

False

Deprecated

False

Effect

Fixed
audit

RBAC role(s)

none

Rule aliases

none

Rule resource types

IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups

Compliance

The following 1 compliance controls are associated with this Policy definition 'Microsoft Managed Control 1808 - Privacy Impact And Risk Assessment ' (cd6120c1-d069-416d-9753-fbe84bca4b01)

Control Domain	Control	Name	MetadataId	Category	Title	Owner	Requirements	Description	Info	Policy#
	op.pl.1 Risk analysis	op.pl.1 Risk analysis	404 not found				n/a	n/a		70

Initiatives usage

Initiative DisplayName	Initiative Id	Initiative Category	State	Type
Spain ENS	175daf90-21e1-4fec-b745-7b4c909aa94c	Regulatory Compliance	GA	BuiltIn

History

Date/Time (UTC ymd) (i)	Change type	Change detail
2022-04-01 20:29:14	add	cd6120c1-d069-416d-9753-fbe84bca4b01

JSON compare

n/a

JSON

api-version=2021-06-01
EPAC