last sync: 2024-Sep-18 17:50:24 UTC

Microsoft Managed Control 1818 - Accounting of Disclosures | Regulatory Compliance - Accountability, Audit, and Risk Management

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1818 - Accounting of Disclosures
Id d39620a4-95c6-4d4f-8aa4-83c0c6a2c640
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 0
Built-in Versioning [Preview]
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this Accountability, Audit, and Risk Management control
Additional metadata Name/Id: ACF1818 / Microsoft Managed Control 1818
Category: Accountability, Audit, and Risk Management
Title: Accounting of Disclosures - Date, Nature, Purpose
Ownership: Customer, Microsoft
Description: Keeps an accurate accounting of disclosures of information held in each system of records under its control, including: (1) Date, nature, and purpose of each disclosure of a record; and (2) Name and address of the person or agency to which the disclosure was made;
Requirements: Azure documents and accounts for all disclosure of PII in licensing terms in the Online Services Terms (OST) and Online Services Data Protection Addendum (DPA) presented to customers that must be accepted before any services are rendered by Microsoft. These terms act as the customer’s notification that PII is being collected and the intended use of the PII. No additional notice is delivered to the customer once the agreement has been signed. However, Microsoft does not share customer PII with any outside source without the consent of the customer.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance
The following 1 compliance controls are associated with this Policy definition 'Microsoft Managed Control 1818 - Accounting of Disclosures ' (d39620a4-95c6-4d4f-8aa4-83c0c6a2c640)
Control Domain Control Name MetadataId Category Title Owner Requirements Description Info Policy#
op.pl.1 Risk analysis op.pl.1 Risk analysis 404 not found n/a n/a 70
Initiatives usage
Initiative DisplayName Initiative Id Initiative Category State Type
Spain ENS 175daf90-21e1-4fec-b745-7b4c909aa94c Regulatory Compliance GA BuiltIn
History
Date/Time (UTC ymd) (i) Change type Change detail
2022-04-01 20:29:14 add d39620a4-95c6-4d4f-8aa4-83c0c6a2c640
JSON compare n/a
JSON
api-version=2021-06-01
EPAC