| Microsoft Managed Control 1387 - Information Spillage Response | Microsoft implements this Incident Response control | audit | 1.0.0 |
| Microsoft Managed Control 1388 - Information Spillage Response | Microsoft implements this Incident Response control | audit | 1.0.0 |
| Microsoft Managed Control 1389 - Information Spillage Response | Microsoft implements this Incident Response control | audit | 1.0.0 |
Information Spillage Response | Responsible Personnel
ID : NIST SP 800-53 R4 IR-9 (1) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1390 - Information Spillage Response | Responsible Personnel | Microsoft implements this Incident Response control | audit | 1.0.0 |
Information Spillage Response | Training
ID : NIST SP 800-53 R4 IR-9 (2) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1391 - Information Spillage Response | Training | Microsoft implements this Incident Response control | audit | 1.0.0 |
Information Spillage Response | Post-Spill Operations
ID : NIST SP 800-53 R4 IR-9 (3) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1392 - Information Spillage Response | Post-Spill Operations | Microsoft implements this Incident Response control | audit | 1.0.0 |
Information Spillage Response | Exposure to Unauthorized Personnel
ID : NIST SP 800-53 R4 IR-9 (4) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1393 - Information Spillage Response | Exposure To Unauthorized Personnel | Microsoft implements this Incident Response control | audit | 1.0.0 |
Maintenance
System Maintenance Policy and Procedures
ID : NIST SP 800-53 R4 MA-1 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1394 - System Maintenance Policy And Procedures | Microsoft implements this Maintenance control | audit | 1.0.0 |
| Microsoft Managed Control 1395 - System Maintenance Policy And Procedures | Microsoft implements this Maintenance control | audit | 1.0.0 |
Controlled Maintenance
ID : NIST SP 800-53 R4 MA-2 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1396 - Controlled Maintenance | Microsoft implements this Maintenance control | audit | 1.0.0 |
| Microsoft Managed Control 1397 - Controlled Maintenance | Microsoft implements this Maintenance control | audit | 1.0.0 |
| Microsoft Managed Control 1398 - Controlled Maintenance | Microsoft implements this Maintenance control | audit | 1.0.0 |
| Microsoft Managed Control 1399 - Controlled Maintenance | Microsoft implements this Maintenance control | audit | 1.0.0 |
| Microsoft Managed Control 1400 - Controlled Maintenance | Microsoft implements this Maintenance control | audit | 1.0.0 |
| Microsoft Managed Control 1401 - Controlled Maintenance | Microsoft implements this Maintenance control | audit | 1.0.0 |
Controlled Maintenance | Automated Maintenance Activities
ID : NIST SP 800-53 R4 MA-2 (2) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1402 - Controlled Maintenance | Automated Maintenance Activities | Microsoft implements this Maintenance control | audit | 1.0.0 |
| Microsoft Managed Control 1403 - Controlled Maintenance | Automated Maintenance Activities | Microsoft implements this Maintenance control | audit | 1.0.0 |
Maintenance Tools
ID : NIST SP 800-53 R4 MA-3 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1404 - Maintenance Tools | Microsoft implements this Maintenance control | audit | 1.0.0 |
Maintenance Tools | Inspect Tools
ID : NIST SP 800-53 R4 MA-3 (1) Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1405 - Maintenance Tools | Inspect Tools | Microsoft implements this Maintenance control | audit | 1.0.0 |
Maintenance Tools | Inspect Media
ID : NIST SP 800-53 R4 MA-3 (2) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1406 - Maintenance Tools | Inspect Media | Microsoft implements this Maintenance control | audit | 1.0.0 |
Maintenance Tools | Prevent Unauthorized Removal
ID : NIST SP 800-53 R4 MA-3 (3) Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1407 - Maintenance Tools | Prevent Unauthorized Removal | Microsoft implements this Maintenance control | audit | 1.0.0 |
| Microsoft Managed Control 1408 - Maintenance Tools | Prevent Unauthorized Removal | Microsoft implements this Maintenance control | audit | 1.0.0 |
| Microsoft Managed Control 1409 - Maintenance Tools | Prevent Unauthorized Removal | Microsoft implements this Maintenance control | audit | 1.0.0 |
| Microsoft Managed Control 1410 - Maintenance Tools | Prevent Unauthorized Removal | Microsoft implements this Maintenance control | audit | 1.0.0 |
Nonlocal Maintenance
ID : NIST SP 800-53 R4 MA-4 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1411 - Nonlocal Maintenance | Microsoft implements this Maintenance control | audit | 1.0.0 |
| Microsoft Managed Control 1412 - Nonlocal Maintenance | Microsoft implements this Maintenance control | audit | 1.0.0 |
| Microsoft Managed Control 1413 - Nonlocal Maintenance | Microsoft implements this Maintenance control | audit | 1.0.0 |
| Microsoft Managed Control 1414 - Nonlocal Maintenance | Microsoft implements this Maintenance control | audit | 1.0.0 |
| Microsoft Managed Control 1415 - Nonlocal Maintenance | Microsoft implements this Maintenance control | audit | 1.0.0 |
Nonlocal Maintenance | Document Nonlocal Maintenance
ID : NIST SP 800-53 R4 MA-4 (2) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1416 - Nonlocal Maintenance | Document Nonlocal Maintenance | Microsoft implements this Maintenance control | audit | 1.0.0 |
Nonlocal Maintenance | Comparable Security / Sanitization
ID : NIST SP 800-53 R4 MA-4 (3) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1417 - Nonlocal Maintenance | Comparable Security / Sanitization | Microsoft implements this Maintenance control | audit | 1.0.0 |
| Microsoft Managed Control 1418 - Nonlocal Maintenance | Comparable Security / Sanitization | Microsoft implements this Maintenance control | audit | 1.0.0 |
Nonlocal Maintenance | Cryptographic Protection
ID : NIST SP 800-53 R4 MA-4 (6) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1419 - Nonlocal Maintenance | Cryptographic Protection | Microsoft implements this Maintenance control | audit | 1.0.0 |
Maintenance Personnel
ID : NIST SP 800-53 R4 MA-5 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1420 - Maintenance Personnel | Microsoft implements this Maintenance control | audit | 1.0.0 |
| Microsoft Managed Control 1421 - Maintenance Personnel | Microsoft implements this Maintenance control | audit | 1.0.0 |
| Microsoft Managed Control 1422 - Maintenance Personnel | Microsoft implements this Maintenance control | audit | 1.0.0 |
Maintenance Personnel | Individuals Without Appropriate Access
ID : NIST SP 800-53 R4 MA-5 (1) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1423 - Maintenance Personnel | Individuals Without Appropriate Access | Microsoft implements this Maintenance control | audit | 1.0.0 |
| Microsoft Managed Control 1424 - Maintenance Personnel | Individuals Without Appropriate Access | Microsoft implements this Maintenance control | audit | 1.0.0 |
Timely Maintenance
ID : NIST SP 800-53 R4 MA-6 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1425 - Timely Maintenance | Microsoft implements this Maintenance control | audit | 1.0.0 |
Media Protection
Media Protection Policy and Procedures
ID : NIST SP 800-53 R4 MP-1 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1426 - Media Protection Policy And Procedures | Microsoft implements this Media Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1427 - Media Protection Policy And Procedures | Microsoft implements this Media Protection control | audit | 1.0.0 |
Media Access
ID : NIST SP 800-53 R4 MP-2 Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1428 - Media Access | Microsoft implements this Media Protection control | audit | 1.0.0 |
Media Marking
ID : NIST SP 800-53 R4 MP-3 Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1429 - Media Marking | Microsoft implements this Media Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1430 - Media Marking | Microsoft implements this Media Protection control | audit | 1.0.0 |
Media Storage
ID : NIST SP 800-53 R4 MP-4 Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1431 - Media Storage | Microsoft implements this Media Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1432 - Media Storage | Microsoft implements this Media Protection control | audit | 1.0.0 |
Media Transport
ID : NIST SP 800-53 R4 MP-5 Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1433 - Media Transport | Microsoft implements this Media Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1434 - Media Transport | Microsoft implements this Media Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1435 - Media Transport | Microsoft implements this Media Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1436 - Media Transport | Microsoft implements this Media Protection control | audit | 1.0.0 |
Media Transport | Cryptographic Protection
ID : NIST SP 800-53 R4 MP-5 (4) Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1437 - Media Transport | Cryptographic Protection | Microsoft implements this Media Protection control | audit | 1.0.0 |
Media Sanitization
ID : NIST SP 800-53 R4 MP-6 Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1438 - Media Sanitization | Microsoft implements this Media Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1439 - Media Sanitization | Microsoft implements this Media Protection control | audit | 1.0.0 |
Media Sanitization | Review / Approve / Track / Document / Verify
ID : NIST SP 800-53 R4 MP-6 (1) Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1440 - Media Sanitization | Review / Approve / Track / Document / Verify | Microsoft implements this Media Protection control | audit | 1.0.0 |
Media Sanitization | Equipment Testing
ID : NIST SP 800-53 R4 MP-6 (2) Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1441 - Media Sanitization | Equipment Testing | Microsoft implements this Media Protection control | audit | 1.0.0 |
Media Sanitization | Nondestructive Techniques
ID : NIST SP 800-53 R4 MP-6 (3) Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1442 - Media Sanitization | Nondestructive Techniques | Microsoft implements this Media Protection control | audit | 1.0.0 |
Media Use
ID : NIST SP 800-53 R4 MP-7 Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1443 - Media Use | Microsoft implements this Media Protection control | audit | 1.0.0 |
Media Use | Prohibit Use Without Owner
ID : NIST SP 800-53 R4 MP-7 (1) Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1444 - Media Use | Prohibit Use Without Owner | Microsoft implements this Media Protection control | audit | 1.0.0 |
Physical and Environmental Protection
Physical and Environmental Protection Policy and Procedures
ID : NIST SP 800-53 R4 PE-1 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1445 - Physical And Environmental Protection Policy And Procedures | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1446 - Physical And Environmental Protection Policy And Procedures | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Physical Access Authorizations
ID : NIST SP 800-53 R4 PE-2 Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1447 - Physical Access Authorizations | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1448 - Physical Access Authorizations | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1449 - Physical Access Authorizations | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1450 - Physical Access Authorizations | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Physical Access Control
ID : NIST SP 800-53 R4 PE-3 Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1451 - Physical Access Control | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1452 - Physical Access Control | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1453 - Physical Access Control | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1454 - Physical Access Control | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1455 - Physical Access Control | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1456 - Physical Access Control | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1457 - Physical Access Control | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Physical Access Control | Information System Access
ID : NIST SP 800-53 R4 PE-3 (1) Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1458 - Physical Access Control | Information System Access | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Access Control for Transmission Medium
ID : NIST SP 800-53 R4 PE-4 Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1459 - Access Control For Transmission Medium | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Access Control for Output Devices
ID : NIST SP 800-53 R4 PE-5 Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1460 - Access Control For Output Devices | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Monitoring Physical Access
ID : NIST SP 800-53 R4 PE-6 Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1461 - Monitoring Physical Access | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1462 - Monitoring Physical Access | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1463 - Monitoring Physical Access | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Monitoring Physical Access | Intrusion Alarms / Surveillance Equipment
ID : NIST SP 800-53 R4 PE-6 (1) Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1464 - Monitoring Physical Access | Intrusion Alarms / Surveillance Equipment | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Monitoring Physical Access | Monitoring Physical Access to Information Systems
ID : NIST SP 800-53 R4 PE-6 (4) Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1465 - Monitoring Physical Access | Monitoring Physical Access To Information Systems | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Visitor Access Records
ID : NIST SP 800-53 R4 PE-8 Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1466 - Visitor Access Records | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1467 - Visitor Access Records | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Visitor Access Records | Automated Records Maintenance / Review
ID : NIST SP 800-53 R4 PE-8 (1) Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1468 - Visitor Access Records | Automated Records Maintenance / Review | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Power Equipment and Cabling
ID : NIST SP 800-53 R4 PE-9 Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1469 - Power Equipment And Cabling | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Emergency Shutoff
ID : NIST SP 800-53 R4 PE-10 Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1470 - Emergency Shutoff | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1471 - Emergency Shutoff | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1472 - Emergency Shutoff | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Emergency Power
ID : NIST SP 800-53 R4 PE-11 Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1473 - Emergency Power | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Emergency Power | Long-Term Alternate Power Supply - Minimal Operational Capability
ID : NIST SP 800-53 R4 PE-11 (1) Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1474 - Emergency Power | Long-Term Alternate Power Supply - Minimal Operational Capability | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Emergency Lighting
ID : NIST SP 800-53 R4 PE-12 Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1475 - Emergency Lighting | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Fire Protection
ID : NIST SP 800-53 R4 PE-13 Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1476 - Fire Protection | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Fire Protection | Detection Devices / Systems
ID : NIST SP 800-53 R4 PE-13 (1) Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1477 - Fire Protection | Detection Devices / Systems | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Fire Protection | Suppression Devices / Systems
ID : NIST SP 800-53 R4 PE-13 (2) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1478 - Fire Protection | Suppression Devices / Systems | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Fire Protection | Automatic Fire Suppression
ID : NIST SP 800-53 R4 PE-13 (3) Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1479 - Fire Protection | Automatic Fire Suppression | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Temperature and Humidity Controls
ID : NIST SP 800-53 R4 PE-14 Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1480 - Temperature And Humidity Controls | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1481 - Temperature And Humidity Controls | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Temperature and Humidity Controls | Monitoring With Alarms / Notifications
ID : NIST SP 800-53 R4 PE-14 (2) Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1482 - Temperature And Humidity Controls | Monitoring With Alarms / Notifications | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Water Damage Protection
ID : NIST SP 800-53 R4 PE-15 Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1483 - Water Damage Protection | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Water Damage Protection | Automation Support
ID : NIST SP 800-53 R4 PE-15 (1) Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1484 - Water Damage Protection | Automation Support | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Delivery and Removal
ID : NIST SP 800-53 R4 PE-16 Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1485 - Delivery And Removal | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Alternate Work Site
ID : NIST SP 800-53 R4 PE-17 Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1486 - Alternate Work Site | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1487 - Alternate Work Site | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1488 - Alternate Work Site | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Location of Information System Components
ID : NIST SP 800-53 R4 PE-18 Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1489 - Location Of Information System Components | Microsoft implements this Physical and Environmental Protection control | audit | 1.0.0 |
Planning
Security Planning Policy and Procedures
ID : NIST SP 800-53 R4 PL-1 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1490 - Security Planning Policy And Procedures | Microsoft implements this Planning control | audit | 1.0.0 |
| Microsoft Managed Control 1491 - Security Planning Policy And Procedures | Microsoft implements this Planning control | audit | 1.0.0 |
System Security Plan
ID : NIST SP 800-53 R4 PL-2 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1492 - System Security Plan | Microsoft implements this Planning control | audit | 1.0.0 |
| Microsoft Managed Control 1493 - System Security Plan | Microsoft implements this Planning control | audit | 1.0.0 |
| Microsoft Managed Control 1494 - System Security Plan | Microsoft implements this Planning control | audit | 1.0.0 |
| Microsoft Managed Control 1495 - System Security Plan | Microsoft implements this Planning control | audit | 1.0.0 |
| Microsoft Managed Control 1496 - System Security Plan | Microsoft implements this Planning control | audit | 1.0.0 |
System Security Plan | Plan / Coordinate With Other Organizational Entities
ID : NIST SP 800-53 R4 PL-2 (3) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1497 - System Security Plan | Plan / Coordinate With Other Organizational Entities | Microsoft implements this Planning control | audit | 1.0.0 |
Rules of Behavior
ID : NIST SP 800-53 R4 PL-4 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1498 - Rules Of Behavior | Microsoft implements this Planning control | audit | 1.0.0 |
| Microsoft Managed Control 1499 - Rules Of Behavior | Microsoft implements this Planning control | audit | 1.0.0 |
| Microsoft Managed Control 1500 - Rules Of Behavior | Microsoft implements this Planning control | audit | 1.0.0 |
| Microsoft Managed Control 1501 - Rules Of Behavior | Microsoft implements this Planning control | audit | 1.0.0 |
Rules of Behavior | Social Media and Networking Restrictions
ID : NIST SP 800-53 R4 PL-4 (1) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1502 - Rules Of Behavior | Social Media And Networking Restrictions | Microsoft implements this Planning control | audit | 1.0.0 |
Information Security Architecture
ID : NIST SP 800-53 R4 PL-8 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1503 - Information Security Architecture | Microsoft implements this Planning control | audit | 1.0.0 |
| Microsoft Managed Control 1504 - Information Security Architecture | Microsoft implements this Planning control | audit | 1.0.0 |
| Microsoft Managed Control 1505 - Information Security Architecture | Microsoft implements this Planning control | audit | 1.0.0 |
Personnel Security
Personnel Security Policy and Procedures
ID : NIST SP 800-53 R4 PS-1 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1506 - Personnel Security Policy And Procedures | Microsoft implements this Personnel Security control | audit | 1.0.0 |
| Microsoft Managed Control 1507 - Personnel Security Policy And Procedures | Microsoft implements this Personnel Security control | audit | 1.0.0 |
Position Risk Designation
ID : NIST SP 800-53 R4 PS-2 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1508 - Position Risk Designation | Microsoft implements this Personnel Security control | audit | 1.0.0 |
| Microsoft Managed Control 1509 - Position Risk Designation | Microsoft implements this Personnel Security control | audit | 1.0.0 |
| Microsoft Managed Control 1510 - Position Risk Designation | Microsoft implements this Personnel Security control | audit | 1.0.0 |
Personnel Screening
ID : NIST SP 800-53 R4 PS-3 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1511 - Personnel Screening | Microsoft implements this Personnel Security control | audit | 1.0.0 |
| Microsoft Managed Control 1512 - Personnel Screening | Microsoft implements this Personnel Security control | audit | 1.0.0 |
Personnel Screening | Information With Special Protection Measures
ID : NIST SP 800-53 R4 PS-3 (3) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1513 - Personnel Screening | Information With Special Protection Measures | Microsoft implements this Personnel Security control | audit | 1.0.0 |
| Microsoft Managed Control 1514 - Personnel Screening | Information With Special Protection Measures | Microsoft implements this Personnel Security control | audit | 1.0.0 |
Personnel Termination
ID : NIST SP 800-53 R4 PS-4 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1515 - Personnel Termination | Microsoft implements this Personnel Security control | audit | 1.0.0 |
| Microsoft Managed Control 1516 - Personnel Termination | Microsoft implements this Personnel Security control | audit | 1.0.0 |
| Microsoft Managed Control 1517 - Personnel Termination | Microsoft implements this Personnel Security control | audit | 1.0.0 |
| Microsoft Managed Control 1518 - Personnel Termination | Microsoft implements this Personnel Security control | audit | 1.0.0 |
| Microsoft Managed Control 1519 - Personnel Termination | Microsoft implements this Personnel Security control | audit | 1.0.0 |
| Microsoft Managed Control 1520 - Personnel Termination | Microsoft implements this Personnel Security control | audit | 1.0.0 |
Personnel Termination | Automated Notification
ID : NIST SP 800-53 R4 PS-4 (2) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1521 - Personnel Termination | Automated Notification | Microsoft implements this Personnel Security control | audit | 1.0.0 |
Personnel Transfer
ID : NIST SP 800-53 R4 PS-5 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1522 - Personnel Transfer | Microsoft implements this Personnel Security control | audit | 1.0.0 |
| Microsoft Managed Control 1523 - Personnel Transfer | Microsoft implements this Personnel Security control | audit | 1.0.0 |
| Microsoft Managed Control 1524 - Personnel Transfer | Microsoft implements this Personnel Security control | audit | 1.0.0 |
| Microsoft Managed Control 1525 - Personnel Transfer | Microsoft implements this Personnel Security control | audit | 1.0.0 |
Access Agreements
ID : NIST SP 800-53 R4 PS-6 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1526 - Access Agreements | Microsoft implements this Personnel Security control | audit | 1.0.0 |
| Microsoft Managed Control 1527 - Access Agreements | Microsoft implements this Personnel Security control | audit | 1.0.0 |
| Microsoft Managed Control 1528 - Access Agreements | Microsoft implements this Personnel Security control | audit | 1.0.0 |
Third-Party Personnel Security
ID : NIST SP 800-53 R4 PS-7 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1529 - Third-Party Personnel Security | Microsoft implements this Personnel Security control | audit | 1.0.0 |
| Microsoft Managed Control 1530 - Third-Party Personnel Security | Microsoft implements this Personnel Security control | audit | 1.0.0 |
| Microsoft Managed Control 1531 - Third-Party Personnel Security | Microsoft implements this Personnel Security control | audit | 1.0.0 |
| Microsoft Managed Control 1532 - Third-Party Personnel Security | Microsoft implements this Personnel Security control | audit | 1.0.0 |
| Microsoft Managed Control 1533 - Third-Party Personnel Security | Microsoft implements this Personnel Security control | audit | 1.0.0 |
Personnel Sanctions
ID : NIST SP 800-53 R4 PS-8 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1534 - Personnel Sanctions | Microsoft implements this Personnel Security control | audit | 1.0.0 |
| Microsoft Managed Control 1535 - Personnel Sanctions | Microsoft implements this Personnel Security control | audit | 1.0.0 |
Risk Assessment
Risk Assessment Policy and Procedures
ID : NIST SP 800-53 R4 RA-1 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1536 - Risk Assessment Policy And Procedures | Microsoft implements this Risk Assessment control | audit | 1.0.0 |
| Microsoft Managed Control 1537 - Risk Assessment Policy And Procedures | Microsoft implements this Risk Assessment control | audit | 1.0.0 |
Security Categorization
ID : NIST SP 800-53 R4 RA-2 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1538 - Security Categorization | Microsoft implements this Risk Assessment control | audit | 1.0.0 |
| Microsoft Managed Control 1539 - Security Categorization | Microsoft implements this Risk Assessment control | audit | 1.0.0 |
| Microsoft Managed Control 1540 - Security Categorization | Microsoft implements this Risk Assessment control | audit | 1.0.0 |
Risk Assessment
ID : NIST SP 800-53 R4 RA-3 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1541 - Risk Assessment | Microsoft implements this Risk Assessment control | audit | 1.0.0 |
| Microsoft Managed Control 1542 - Risk Assessment | Microsoft implements this Risk Assessment control | audit | 1.0.0 |
| Microsoft Managed Control 1543 - Risk Assessment | Microsoft implements this Risk Assessment control | audit | 1.0.0 |
| Microsoft Managed Control 1544 - Risk Assessment | Microsoft implements this Risk Assessment control | audit | 1.0.0 |
| Microsoft Managed Control 1545 - Risk Assessment | Microsoft implements this Risk Assessment control | audit | 1.0.0 |
Vulnerability Scanning
ID : NIST SP 800-53 R4 RA-5 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| A vulnerability assessment solution should be enabled on your virtual machines | Audits virtual machines to detect whether they are running a supported vulnerability assessment solution. A core component of every cyber risk and security program is the identification and analysis of vulnerabilities. Azure Security Center's standard pricing tier includes vulnerability scanning for your virtual machines at no extra cost. Additionally, Security Center can automatically deploy this tool for you. | AuditIfNotExists, Disabled | 3.0.0 |
| Advanced data security should be enabled on SQL Managed Instance | Audit each SQL Managed Instance without advanced data security. | AuditIfNotExists, Disabled | 1.0.1 |
| Advanced data security should be enabled on your SQL servers | Audit SQL servers without Advanced Data Security | AuditIfNotExists, Disabled | 2.0.0 |
| Microsoft Managed Control 1546 - Vulnerability Scanning | Microsoft implements this Risk Assessment control | audit | 1.0.0 |
| Microsoft Managed Control 1547 - Vulnerability Scanning | Microsoft implements this Risk Assessment control | audit | 1.0.0 |
| Microsoft Managed Control 1548 - Vulnerability Scanning | Microsoft implements this Risk Assessment control | audit | 1.0.0 |
| Microsoft Managed Control 1549 - Vulnerability Scanning | Microsoft implements this Risk Assessment control | audit | 1.0.0 |
| Microsoft Managed Control 1550 - Vulnerability Scanning | Microsoft implements this Risk Assessment control | audit | 1.0.0 |
| Vulnerabilities in security configuration on your machines should be remediated | Servers which do not satisfy the configured baseline will be monitored by Azure Security Center as recommendations | AuditIfNotExists, Disabled | 3.0.0 |
| Vulnerabilities in security configuration on your virtual machine scale sets should be remediated | Audit the OS vulnerabilities on your virtual machine scale sets to protect them from attacks. | AuditIfNotExists, Disabled | 3.0.0 |
| Vulnerabilities on your SQL databases should be remediated | Monitor Vulnerability Assessment scan results and recommendations for how to remediate database vulnerabilities. | AuditIfNotExists, Disabled | 4.0.0 |
Vulnerability Scanning | Update Tool Capability
ID : NIST SP 800-53 R4 RA-5 (1) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1551 - Vulnerability Scanning | Update Tool Capability | Microsoft implements this Risk Assessment control | audit | 1.0.0 |
Vulnerability Scanning | Update by Frequency / Prior to New Scan / When Identified
ID : NIST SP 800-53 R4 RA-5 (2) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1552 - Vulnerability Scanning | Update By Frequency / Prior To New Scan / When Identified | Microsoft implements this Risk Assessment control | audit | 1.0.0 |
Vulnerability Scanning | Breadth / Depth of Coverage
ID : NIST SP 800-53 R4 RA-5 (3) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1553 - Vulnerability Scanning | Breadth / Depth Of Coverage | Microsoft implements this Risk Assessment control | audit | 1.0.0 |
Vulnerability Scanning | Discoverable Information
ID : NIST SP 800-53 R4 RA-5 (4) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1554 - Vulnerability Scanning | Discoverable Information | Microsoft implements this Risk Assessment control | audit | 1.0.0 |
Vulnerability Scanning | Privileged Access
ID : NIST SP 800-53 R4 RA-5 (5) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1555 - Vulnerability Scanning | Privileged Access | Microsoft implements this Risk Assessment control | audit | 1.0.0 |
Vulnerability Scanning | Automated Trend Analyses
ID : NIST SP 800-53 R4 RA-5 (6) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1556 - Vulnerability Scanning | Automated Trend Analyses | Microsoft implements this Risk Assessment control | audit | 1.0.0 |
Vulnerability Scanning | Review Historic Audit Logs
ID : NIST SP 800-53 R4 RA-5 (8) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1557 - Vulnerability Scanning | Review Historic Audit Logs | Microsoft implements this Risk Assessment control | audit | 1.0.0 |
Vulnerability Scanning | Correlate Scanning Information
ID : NIST SP 800-53 R4 RA-5 (10) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1558 - Vulnerability Scanning | Correlate Scanning Information | Microsoft implements this Risk Assessment control | audit | 1.0.0 |
System and Services Acquisition
System and Services Acquisition Policy and Procedures
ID : NIST SP 800-53 R4 SA-1 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1559 - System And Services Acquisition Policy And Procedures | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1560 - System And Services Acquisition Policy And Procedures | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
Allocation of Resources
ID : NIST SP 800-53 R4 SA-2 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1561 - Allocation Of Resources | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1562 - Allocation Of Resources | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1563 - Allocation Of Resources | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
System Development Life Cycle
ID : NIST SP 800-53 R4 SA-3 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1564 - System Development Life Cycle | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1565 - System Development Life Cycle | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1566 - System Development Life Cycle | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1567 - System Development Life Cycle | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
Acquisition Process
ID : NIST SP 800-53 R4 SA-4 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1568 - Acquisition Process | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1569 - Acquisition Process | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1570 - Acquisition Process | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1571 - Acquisition Process | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1572 - Acquisition Process | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1573 - Acquisition Process | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1574 - Acquisition Process | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
Acquisition Process | Functional Properties of Security Controls
ID : NIST SP 800-53 R4 SA-4 (1) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1575 - Acquisition Process | Functional Properties Of Security Controls | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
Acquisition Process | Design / Implementation Information for Security Controls
ID : NIST SP 800-53 R4 SA-4 (2) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1576 - Acquisition Process | Design / Implementation Information For Security Controls | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
Acquisition Process | Continuous Monitoring Plan
ID : NIST SP 800-53 R4 SA-4 (8) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1577 - Acquisition Process | Continuous Monitoring Plan | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
Acquisition Process | Functions / Ports / Protocols / Services in Use
ID : NIST SP 800-53 R4 SA-4 (9) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1578 - Acquisition Process | Functions / Ports / Protocols / Services In Use | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
Acquisition Process | Use of Approved Piv Products
ID : NIST SP 800-53 R4 SA-4 (10) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1579 - Acquisition Process | Use Of Approved Piv Products | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
Information System Documentation
ID : NIST SP 800-53 R4 SA-5 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1580 - Information System Documentation | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1581 - Information System Documentation | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1582 - Information System Documentation | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1583 - Information System Documentation | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1584 - Information System Documentation | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
Security Engineering Principles
ID : NIST SP 800-53 R4 SA-8 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1585 - Security Engineering Principles | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
External Information System Services
ID : NIST SP 800-53 R4 SA-9 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1586 - External Information System Services | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1587 - External Information System Services | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1588 - External Information System Services | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
External Information System Services | Risk Assessments / Organizational Approvals
ID : NIST SP 800-53 R4 SA-9 (1) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1589 - External Information System Services | Risk Assessments / Organizational Approvals | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1590 - External Information System Services | Risk Assessments / Organizational Approvals | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
External Information System Services | Identification of Functions / Ports / Protocols / Services
ID : NIST SP 800-53 R4 SA-9 (2) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1591 - External Information System Services | Ident. Of Functions / Ports / Protocols / Services | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
External Information System Services | Consistent Interests of Consumers and Providers
ID : NIST SP 800-53 R4 SA-9 (4) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1592 - External Information System Services | Consistent Interests Of Consumers And Providers | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
External Information System Services | Processing, Storage, and Service Location
ID : NIST SP 800-53 R4 SA-9 (5) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1593 - External Information System Services | Processing, Storage, And Service Location | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
Developer Configuration Management
ID : NIST SP 800-53 R4 SA-10 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1594 - Developer Configuration Management | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1595 - Developer Configuration Management | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1596 - Developer Configuration Management | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1597 - Developer Configuration Management | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1598 - Developer Configuration Management | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
Developer Configuration Management | Software / Firmware Integrity Verification
ID : NIST SP 800-53 R4 SA-10 (1) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1599 - Developer Configuration Management | Software / Firmware Integrity Verification | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
Developer Security Testing and Evaluation
ID : NIST SP 800-53 R4 SA-11 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1600 - Developer Security Testing And Evaluation | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1601 - Developer Security Testing And Evaluation | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1602 - Developer Security Testing And Evaluation | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1603 - Developer Security Testing And Evaluation | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1604 - Developer Security Testing And Evaluation | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
Developer Security Testing and Evaluation | Static Code Analysis
ID : NIST SP 800-53 R4 SA-11 (1) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1605 - Developer Security Testing And Evaluation | Static Code Analysis | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
Developer Security Testing and Evaluation | Threat and Vulnerability Analyses
ID : NIST SP 800-53 R4 SA-11 (2) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1606 - Developer Security Testing And Evaluation | Threat And Vulnerability Analyses | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
Developer Security Testing and Evaluation | Dynamic Code Analysis
ID : NIST SP 800-53 R4 SA-11 (8) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1607 - Developer Security Testing And Evaluation | Dynamic Code Analysis | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
Supply Chain Protection
ID : NIST SP 800-53 R4 SA-12 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1608 - Supply Chain Protection | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
Development Process, Standards, and Tools
ID : NIST SP 800-53 R4 SA-15 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1609 - Development Process, Standards, And Tools | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1610 - Development Process, Standards, And Tools | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
Developer-Provided Training
ID : NIST SP 800-53 R4 SA-16 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1611 - Developer-Provided Training | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
Developer Security Architecture and Design
ID : NIST SP 800-53 R4 SA-17 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1612 - Developer Security Architecture And Design | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1613 - Developer Security Architecture And Design | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
| Microsoft Managed Control 1614 - Developer Security Architecture And Design | Microsoft implements this System and Services Acquisition control | audit | 1.0.0 |
System and Communications Protection
System and Communications Protection Policy and Procedures
ID : NIST SP 800-53 R4 SC-1 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1615 - System And Communications Protection Policy And Procedures | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1616 - System And Communications Protection Policy And Procedures | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Application Partitioning
ID : NIST SP 800-53 R4 SC-2 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1617 - Application Partitioning | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Security Function Isolation
ID : NIST SP 800-53 R4 SC-3 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1618 - Security Function Isolation | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Information in Shared Resources
ID : NIST SP 800-53 R4 SC-4 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1619 - Information In Shared Resources | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Denial of Service Protection
ID : NIST SP 800-53 R4 SC-5 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Azure DDoS Protection Standard should be enabled | DDoS protection standard should be enabled for all virtual networks with a subnet that is part of an application gateway with a public IP. | AuditIfNotExists, Disabled | 3.0.0 |
| Microsoft Managed Control 1620 - Denial Of Service Protection | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Resource Availability
ID : NIST SP 800-53 R4 SC-6 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1621 - Resource Availability | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Boundary Protection
ID : NIST SP 800-53 R4 SC-7 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Adaptive network hardening recommendations should be applied on internet facing virtual machines | Azure Security Center analyzes the traffic patterns of Internet facing virtual machines and provides Network Security Group rule recommendations that reduce the potential attack surface | AuditIfNotExists, Disabled | 3.0.0 |
| All network ports should be restricted on network security groups associated to your virtual machine | Azure Security Center has identified some of your network security groups' inbound rules to be too permissive. Inbound rules should not allow access from 'Any' or 'Internet' ranges. This can potentially enable attackers to target your resources. | AuditIfNotExists, Disabled | 3.0.0 |
| Microsoft Managed Control 1622 - Boundary Protection | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1623 - Boundary Protection | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1624 - Boundary Protection | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
| Storage accounts should restrict network access | Network access to storage accounts should be restricted. Configure network rules so only applications from allowed networks can access the storage account. To allow connections from specific internet or on-premises clients, access can be granted to traffic from specific Azure virtual networks or to public internet IP address ranges | Audit, Deny, Disabled | 1.1.1 |
Boundary Protection | Access Points
ID : NIST SP 800-53 R4 SC-7 (3) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Management ports of virtual machines should be protected with just-in-time network access control | Possible network Just In Time (JIT) access will be monitored by Azure Security Center as recommendations | AuditIfNotExists, Disabled | 3.0.0 |
| Microsoft Managed Control 1625 - Boundary Protection | Access Points | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Boundary Protection | External Telecommunications Services
ID : NIST SP 800-53 R4 SC-7 (4) Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Management ports of virtual machines should be protected with just-in-time network access control | Possible network Just In Time (JIT) access will be monitored by Azure Security Center as recommendations | AuditIfNotExists, Disabled | 3.0.0 |
| Microsoft Managed Control 1626 - Boundary Protection | External Telecommunications Services | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1627 - Boundary Protection | External Telecommunications Services | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1628 - Boundary Protection | External Telecommunications Services | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1629 - Boundary Protection | External Telecommunications Services | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1630 - Boundary Protection | External Telecommunications Services | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Boundary Protection | Deny by Default / Allow by Exception
ID : NIST SP 800-53 R4 SC-7 (5) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1631 - Boundary Protection | Deny By Default / Allow By Exception | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Boundary Protection | Prevent Split Tunneling for Remote Devices
ID : NIST SP 800-53 R4 SC-7 (7) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1632 - Boundary Protection | Prevent Split Tunneling For Remote Devices | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Boundary Protection | Route Traffic to Authenticated Proxy Servers
ID : NIST SP 800-53 R4 SC-7 (8) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1633 - Boundary Protection | Route Traffic To Authenticated Proxy Servers | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Boundary Protection | Prevent Unauthorized Exfiltration
ID : NIST SP 800-53 R4 SC-7 (10) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1634 - Boundary Protection | Prevent Unauthorized Exfiltration | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Boundary Protection | Host-Based Protection
ID : NIST SP 800-53 R4 SC-7 (12) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1635 - Boundary Protection | Host-Based Protection | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Boundary Protection | Isolation of Security Tools / Mechanisms / Support Components
ID : NIST SP 800-53 R4 SC-7 (13) Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1636 - Boundary Protection | Isolation Of Security Tools / Mechanisms / Support Components | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Boundary Protection | Fail Secure
ID : NIST SP 800-53 R4 SC-7 (18) Ownership : Microsoft
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1637 - Boundary Protection | Fail Secure | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Boundary Protection | Dynamic Isolation / Segregation
ID : NIST SP 800-53 R4 SC-7 (20) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1638 - Boundary Protection | Dynamic Isolation / Segregation | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Boundary Protection | Isolation of Information System Components
ID : NIST SP 800-53 R4 SC-7 (21) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1639 - Boundary Protection | Isolation Of Information System Components | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Transmission Confidentiality and Integrity
ID : NIST SP 800-53 R4 SC-8 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1640 - Transmission Confidentiality And Integrity | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Transmission Confidentiality and Integrity | Cryptographic or Alternate Physical Protection
ID : NIST SP 800-53 R4 SC-8 (1) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| API App should only be accessible over HTTPS | Use of HTTPS ensures server/service authentication and protects data in transit from network layer eavesdropping attacks. | Audit, Disabled | 1.0.0 |
| Function App should only be accessible over HTTPS | Use of HTTPS ensures server/service authentication and protects data in transit from network layer eavesdropping attacks. | Audit, Disabled | 1.0.0 |
| Microsoft Managed Control 1641 - Transmission Confidentiality And Integrity | Cryptographic Or Alternate Physical Protection | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
| Only secure connections to your Azure Cache for Redis should be enabled | Audit enabling of only connections via SSL to Azure Cache for Redis. Use of secure connections ensures authentication between the server and the service and protects data in transit from network layer attacks such as man-in-the-middle, eavesdropping, and session-hijacking | Audit, Deny, Disabled | 1.0.0 |
| Secure transfer to storage accounts should be enabled | Audit requirement of Secure transfer in your storage account. Secure transfer is an option that forces your storage account to accept requests only from secure connections (HTTPS). Use of HTTPS ensures authentication between the server and the service and protects data in transit from network layer attacks such as man-in-the-middle, eavesdropping, and session-hijacking | Audit, Deny, Disabled | 2.0.0 |
| Web Application should only be accessible over HTTPS | Use of HTTPS ensures server/service authentication and protects data in transit from network layer eavesdropping attacks. | Audit, Disabled | 1.0.0 |
| Windows web servers should be configured to use secure communication protocols | To protect the privacy of information communicated over the Internet, your web servers should use the latest version of the industry-standard cryptographic protocol, Transport Layer Security (TLS). TLS secures communications over a network by using security certificates to encrypt a connection between machines. TLS 1.3 is faster and more secure than the earlier versions: TLS 1.0-1.2 and SSL 2-3, which are all considered legacy protocols. | AuditIfNotExists, Disabled | 2.0.0 |
Network Disconnect
ID : NIST SP 800-53 R4 SC-10 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1642 - Network Disconnect | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Cryptographic Key Establishment and Management
ID : NIST SP 800-53 R4 SC-12 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1643 - Cryptographic Key Establishment And Management | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Cryptographic Key Establishment and Management | Availability
ID : NIST SP 800-53 R4 SC-12 (1) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1644 - Cryptographic Key Establishment And Management | Availability | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Cryptographic Key Establishment and Management | Symmetric Keys
ID : NIST SP 800-53 R4 SC-12 (2) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1645 - Cryptographic Key Establishment And Management | Symmetric Keys | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Cryptographic Key Establishment and Management | Asymmetric Keys
ID : NIST SP 800-53 R4 SC-12 (3) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1646 - Cryptographic Key Establishment And Management | Asymmetric Keys | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Cryptographic Protection
ID : NIST SP 800-53 R4 SC-13 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1647 - Cryptographic Protection | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Collaborative Computing Devices
ID : NIST SP 800-53 R4 SC-15 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1648 - Collaborative Computing Devices | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1649 - Collaborative Computing Devices | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Public Key Infrastructure Certificates
ID : NIST SP 800-53 R4 SC-17 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1650 - Public Key Infrastructure Certificates | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Mobile Code
ID : NIST SP 800-53 R4 SC-18 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1651 - Mobile Code | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1652 - Mobile Code | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1653 - Mobile Code | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Voice Over Internet Protocol
ID : NIST SP 800-53 R4 SC-19 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1654 - Voice Over Internet Protocol | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1655 - Voice Over Internet Protocol | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Secure Name / Address Resolution Service (Authoritative Source)
ID : NIST SP 800-53 R4 SC-20 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1656 - Secure Name / Address Resolution Service (Authoritative Source) | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
| Microsoft Managed Control 1657 - Secure Name / Address Resolution Service (Authoritative Source) | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Secure Name / Address Resolution Service (Recursive or Caching Resolver)
ID : NIST SP 800-53 R4 SC-21 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1658 - Secure Name / Address Resolution Service (Recursive Or Caching Resolver) | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Architecture and Provisioning for Name / Address Resolution Service
ID : NIST SP 800-53 R4 SC-22 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1659 - Architecture And Provisioning For Name / Address Resolution Service | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Session Authenticity
ID : NIST SP 800-53 R4 SC-23 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1660 - Session Authenticity | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Session Authenticity | Invalidate Session Identifiers at Logout
ID : NIST SP 800-53 R4 SC-23 (1) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1661 - Session Authenticity | Invalidate Session Identifiers At Logout | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Fail in Known State
ID : NIST SP 800-53 R4 SC-24 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1662 - Fail In Known State | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Protection of Information at Rest
ID : NIST SP 800-53 R4 SC-28 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1663 - Protection Of Information At Rest | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
Protection of Information at Rest | Cryptographic Protection
ID : NIST SP 800-53 R4 SC-28 (1) Ownership : Customer
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Advanced data security should be enabled on SQL Managed Instance | Audit each SQL Managed Instance without advanced data security. | AuditIfNotExists, Disabled | 1.0.1 |
| Advanced data security should be enabled on your SQL servers | Audit SQL servers without Advanced Data Security | AuditIfNotExists, Disabled | 2.0.0 |
| Disk encryption should be applied on virtual machines | Virtual machines without an enabled disk encryption will be monitored by Azure Security Center as recommendations. | AuditIfNotExists, Disabled | 2.0.0 |
| Microsoft Managed Control 1664 - Protection Of Information At Rest | Cryptographic Protection | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
| Transparent Data Encryption on SQL databases should be enabled | Transparent data encryption should be enabled to protect data-at-rest and meet compliance requirements | AuditIfNotExists, Disabled | 1.0.0 |
Process Isolation
ID : NIST SP 800-53 R4 SC-39 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1665 - Process Isolation | Microsoft implements this System and Communications Protection control | audit | 1.0.0 |
System and Information Integrity
System and Information Integrity Policy and Procedures
ID : NIST SP 800-53 R4 SI-1 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1666 - System And Information Integrity Policy And Procedures | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
| Microsoft Managed Control 1667 - System And Information Integrity Policy And Procedures | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Flaw Remediation
ID : NIST SP 800-53 R4 SI-2 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| A vulnerability assessment solution should be enabled on your virtual machines | Audits virtual machines to detect whether they are running a supported vulnerability assessment solution. A core component of every cyber risk and security program is the identification and analysis of vulnerabilities. Azure Security Center's standard pricing tier includes vulnerability scanning for your virtual machines at no extra cost. Additionally, Security Center can automatically deploy this tool for you. | AuditIfNotExists, Disabled | 3.0.0 |
| Microsoft Managed Control 1668 - Flaw Remediation | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
| Microsoft Managed Control 1669 - Flaw Remediation | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
| Microsoft Managed Control 1670 - Flaw Remediation | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
| Microsoft Managed Control 1671 - Flaw Remediation | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
| System updates on virtual machine scale sets should be installed | Audit whether there are any missing system security updates and critical updates that should be installed to ensure that your Windows and Linux virtual machine scale sets are secure. | AuditIfNotExists, Disabled | 3.0.0 |
| System updates should be installed on your machines | Missing security system updates on your servers will be monitored by Azure Security Center as recommendations | AuditIfNotExists, Disabled | 3.0.0 |
| Vulnerabilities in security configuration on your machines should be remediated | Servers which do not satisfy the configured baseline will be monitored by Azure Security Center as recommendations | AuditIfNotExists, Disabled | 3.0.0 |
| Vulnerabilities in security configuration on your virtual machine scale sets should be remediated | Audit the OS vulnerabilities on your virtual machine scale sets to protect them from attacks. | AuditIfNotExists, Disabled | 3.0.0 |
| Vulnerabilities on your SQL databases should be remediated | Monitor Vulnerability Assessment scan results and recommendations for how to remediate database vulnerabilities. | AuditIfNotExists, Disabled | 4.0.0 |
Flaw Remediation | Central Management
ID : NIST SP 800-53 R4 SI-2 (1) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1672 - Flaw Remediation | Central Management | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Flaw Remediation | Automated Flaw Remediation Status
ID : NIST SP 800-53 R4 SI-2 (2) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1673 - Flaw Remediation | Automated Flaw Remediation Status | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Flaw Remediation | Time to Remediate Flaws / Benchmarks for Corrective Actions
ID : NIST SP 800-53 R4 SI-2 (3) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1674 - Flaw Remediation | Time To Remediate Flaws / Benchmarks For Corrective Actions | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
| Microsoft Managed Control 1675 - Flaw Remediation | Time To Remediate Flaws / Benchmarks For Corrective Actions | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Malicious Code Protection
ID : NIST SP 800-53 R4 SI-3 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Endpoint protection solution should be installed on virtual machine scale sets | Audit the existence and health of an endpoint protection solution on your virtual machines scale sets, to protect them from threats and vulnerabilities. | AuditIfNotExists, Disabled | 3.0.0 |
| Microsoft Managed Control 1676 - Malicious Code Protection | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
| Microsoft Managed Control 1677 - Malicious Code Protection | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
| Microsoft Managed Control 1678 - Malicious Code Protection | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
| Microsoft Managed Control 1679 - Malicious Code Protection | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
| Monitor missing Endpoint Protection in Azure Security Center | Servers without an installed Endpoint Protection agent will be monitored by Azure Security Center as recommendations | AuditIfNotExists, Disabled | 3.0.0 |
Malicious Code Protection | Central Management
ID : NIST SP 800-53 R4 SI-3 (1) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Endpoint protection solution should be installed on virtual machine scale sets | Audit the existence and health of an endpoint protection solution on your virtual machines scale sets, to protect them from threats and vulnerabilities. | AuditIfNotExists, Disabled | 3.0.0 |
| Microsoft Managed Control 1680 - Malicious Code Protection | Central Management | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
| Monitor missing Endpoint Protection in Azure Security Center | Servers without an installed Endpoint Protection agent will be monitored by Azure Security Center as recommendations | AuditIfNotExists, Disabled | 3.0.0 |
Malicious Code Protection | Automatic Updates
ID : NIST SP 800-53 R4 SI-3 (2) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1681 - Malicious Code Protection | Automatic Updates | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Malicious Code Protection | Nonsignature-Based Detection
ID : NIST SP 800-53 R4 SI-3 (7) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1682 - Malicious Code Protection | Nonsignature-Based Detection | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Information System Monitoring
ID : NIST SP 800-53 R4 SI-4 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| [Preview]: Audit Log Analytics Agent Deployment - VM Image (OS) unlisted | Reports VMs as non-compliant if the VM Image (OS) is not in the list defined and the agent is not installed. The list of OS images will be updated over time as support is updated. | auditIfNotExists | 1.0.0-preview |
| Advanced data security should be enabled on SQL Managed Instance | Audit each SQL Managed Instance without advanced data security. | AuditIfNotExists, Disabled | 1.0.1 |
| Advanced data security should be enabled on your SQL servers | Audit SQL servers without Advanced Data Security | AuditIfNotExists, Disabled | 2.0.0 |
| Audit Log Analytics agent deployment in virtual machine scale sets - VM Image (OS) unlisted | Reports virtual machine scale sets as non-compliant if the VM Image (OS) is not in the list defined and the agent is not installed. The list of OS images will be updated over time as support is updated. | auditIfNotExists | 1.0.1 |
| Audit Log Analytics workspace for VM - Report Mismatch | Reports VMs as non-compliant if they aren't logging to the Log Analytics workspace specified in the policy/initiative assignment. | audit | 1.0.1 |
| Microsoft Managed Control 1683 - Information System Monitoring | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
| Microsoft Managed Control 1684 - Information System Monitoring | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
| Microsoft Managed Control 1685 - Information System Monitoring | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
| Microsoft Managed Control 1686 - Information System Monitoring | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
| Microsoft Managed Control 1687 - Information System Monitoring | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
| Microsoft Managed Control 1688 - Information System Monitoring | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
| Microsoft Managed Control 1689 - Information System Monitoring | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Information System Monitoring | System-Wide Intrusion Detection System
ID : NIST SP 800-53 R4 SI-4 (1) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1690 - Information System Monitoring | System-Wide Intrusion Detection System | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Information System Monitoring | Automated Tools for Real-Time Analysis
ID : NIST SP 800-53 R4 SI-4 (2) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1691 - Information System Monitoring | Automated Tools For Real-Time Analysis | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Information System Monitoring | Inbound and Outbound Communications Traffic
ID : NIST SP 800-53 R4 SI-4 (4) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1692 - Information System Monitoring | Inbound And Outbound Communications Traffic | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Information System Monitoring | System-Generated Alerts
ID : NIST SP 800-53 R4 SI-4 (5) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1693 - Information System Monitoring | System-Generated Alerts | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Information System Monitoring | Analyze Communications Traffic Anomalies
ID : NIST SP 800-53 R4 SI-4 (11) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1694 - Information System Monitoring | Analyze Communications Traffic Anomalies | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Information System Monitoring | Wireless Intrusion Detection
ID : NIST SP 800-53 R4 SI-4 (14) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1695 - Information System Monitoring | Wireless Intrusion Detection | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Information System Monitoring | Correlate Monitoring Information
ID : NIST SP 800-53 R4 SI-4 (16) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1696 - Information System Monitoring | Correlate Monitoring Information | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Information System Monitoring | Analyze Traffic / Covert Exfiltration
ID : NIST SP 800-53 R4 SI-4 (18) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1697 - Information System Monitoring | Analyze Traffic / Covert Exfiltration | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Information System Monitoring | Individuals Posing Greater Risk
ID : NIST SP 800-53 R4 SI-4 (19) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1698 - Information System Monitoring | Individuals Posing Greater Risk | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Information System Monitoring | Privileged Users
ID : NIST SP 800-53 R4 SI-4 (20) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1699 - Information System Monitoring | Privileged Users | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Information System Monitoring | Unauthorized Network Services
ID : NIST SP 800-53 R4 SI-4 (22) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1700 - Information System Monitoring | Unauthorized Network Services | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Information System Monitoring | Host-Based Devices
ID : NIST SP 800-53 R4 SI-4 (23) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1701 - Information System Monitoring | Host-Based Devices | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Information System Monitoring | Indicators of Compromise
ID : NIST SP 800-53 R4 SI-4 (24) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1702 - Information System Monitoring | Indicators Of Compromise | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Security Alerts, Advisories, and Directives
ID : NIST SP 800-53 R4 SI-5 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1703 - Security Alerts, Advisories, And Directives | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
| Microsoft Managed Control 1704 - Security Alerts, Advisories, And Directives | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
| Microsoft Managed Control 1705 - Security Alerts, Advisories, And Directives | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
| Microsoft Managed Control 1706 - Security Alerts, Advisories, And Directives | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Security Alerts, Advisories, and Directives | Automated Alerts and Advisories
ID : NIST SP 800-53 R4 SI-5 (1) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1707 - Security Alerts, Advisories, And Directives | Automated Alerts And Advisories | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Security Function Verification
ID : NIST SP 800-53 R4 SI-6 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1708 - Security Function Verification | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
| Microsoft Managed Control 1709 - Security Function Verification | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
| Microsoft Managed Control 1710 - Security Function Verification | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
| Microsoft Managed Control 1711 - Security Function Verification | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Software, Firmware, and Information Integrity
ID : NIST SP 800-53 R4 SI-7 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1712 - Software, Firmware, And Information Integrity | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Software, Firmware, and Information Integrity | Integrity Checks
ID : NIST SP 800-53 R4 SI-7 (1) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1713 - Software, Firmware, And Information Integrity | Integrity Checks | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Software, Firmware, and Information Integrity | Automated Notifications of Integrity Violations
ID : NIST SP 800-53 R4 SI-7 (2) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1714 - Software, Firmware, And Information Integrity | Automated Notifications Of Integrity Violations | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Software, Firmware, and Information Integrity | Automated Response to Integrity Violations
ID : NIST SP 800-53 R4 SI-7 (5) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1715 - Software, Firmware, And Information Integrity | Automated Response To Integrity Violations | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Software, Firmware, and Information Integrity | Integration of Detection and Response
ID : NIST SP 800-53 R4 SI-7 (7) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1716 - Software, Firmware, And Information Integrity | Integration Of Detection And Response | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Software, Firmware, and Information Integrity | Binary or Machine Executable Code
ID : NIST SP 800-53 R4 SI-7 (14) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1717 - Software, Firmware, And Information Integrity | Binary Or Machine Executable Code | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
| Microsoft Managed Control 1718 - Software, Firmware, And Information Integrity | Binary Or Machine Executable Code | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Spam Protection
ID : NIST SP 800-53 R4 SI-8 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1719 - Spam Protection | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
| Microsoft Managed Control 1720 - Spam Protection | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Spam Protection | Central Management
ID : NIST SP 800-53 R4 SI-8 (1) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1721 - Spam Protection | Central Management | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Spam Protection | Automatic Updates
ID : NIST SP 800-53 R4 SI-8 (2) Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1722 - Spam Protection | Automatic Updates | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Information Input Validation
ID : NIST SP 800-53 R4 SI-10 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1723 - Information Input Validation | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Error Handling
ID : NIST SP 800-53 R4 SI-11 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1724 - Error Handling | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
| Microsoft Managed Control 1725 - Error Handling | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Information Handling and Retention
ID : NIST SP 800-53 R4 SI-12 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1726 - Information Handling And Retention | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Memory Protection
ID : NIST SP 800-53 R4 SI-16 Ownership : Shared
|
Name
(Azure portal) |
Description | Effect(s) |
Version
(GitHub) |
|---|---|---|---|
| Microsoft Managed Control 1727 - Memory Protection | Microsoft implements this System and Information Integrity control | audit | 1.0.0 |
Note
Availability of specific Azure Policy definitions may vary in Azure Government and other national clouds.
Next steps
Additional articles about Azure Policy:
- Regulatory Compliance overview.
- See the initiative definition structure .
- Review other examples at Azure Policy samples .
- Review Understanding policy effects .
- Learn how to remediate non-compliant resources .