| Source | Azure Portal | ||||||
| Display name | Microsoft Managed Control 1089 - Security Awareness | ||||||
| Id | ef080e67-0d1a-4f76-a0c5-fb9b0358485e | ||||||
| Version | 1.0.1 Details on versioning |
||||||
| Versioning |
Versions supported for Versioning: 0 Built-in Versioning [Preview] |
||||||
| Category | Regulatory Compliance Microsoft Learn |
||||||
| Description | Microsoft implements this Awareness and Training control | ||||||
| Additional metadata |
Name/Id: ACF1089 / Microsoft Managed Control 1089 Category: Awareness and Training Title: Security Awareness Training - New User Training Ownership: Customer, Microsoft Description: The organization provides basic security awareness training to information system users (including managers, senior executives, and contractors): As part of initial training for new users; Requirements: The annual security foundations training includes basic level training on how to detect, report and implement best practices to safeguard Microsoft and its customers. This course also covers the security requirements and expectations for elevated privileges in production environments. Engineering personnel participate in ongoing role-based security training through the STRIKE program. STRIKE provides regular 200-400 level sessions, labs, online courses, and material to engage, educate, and empower engineers to securely design and operate services. Azure requires all personnel to complete the following training as part of their onboarding process: * Security Foundations course – Azure new hire personnel are required to take the Security Foundations course within thirty (30) days of employment, and annually thereafter for non-engineering personnel. * STRIKE – Azure engineering personnel are required to participate in STRIKE annually. Participation includes in-person events, sessions, labs, and online courses. |
||||||
| Mode | Indexed | ||||||
| Type | Static | ||||||
| Preview | False | ||||||
| Deprecated | False | ||||||
| Effect | Fixed audit |
||||||
| RBAC role(s) | none | ||||||
| Rule aliases | none | ||||||
| Rule resource types | IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups |
||||||
| Compliance | Not a Compliance control | ||||||
| Initiatives usage | none | ||||||
| History |
|
||||||
| JSON compare |
compare mode:
version left:
version right:
|
||||||
| JSON |
|