| Source | Azure Portal | ||
| Display name | Microsoft Managed Control 1375 - Incident Response Assistance | Automation Support For Availability Of Information / Support | ||
| Id | 00379355-8932-4b52-b63a-3bc6daf3451a | ||
| Version | 1.0.0 Details on versioning |
||
| Category | Regulatory Compliance Microsoft Learn |
||
| Description | Microsoft implements this Incident Response control | ||
| Additional metadata |
Name/Id: ACF1375 / Microsoft Managed Control 1375 Category: Incident Response Title: Incident Response Assistance | Automation Support For Availability Of Information / Support Ownership: Customer, Microsoft Description: The organization employs automated mechanisms to increase the availability of incident response-related information and support. Requirements: Azure tracks events and incidents through Incident Management system (IcM) and Service Now (SNow) and employs Azure Security Monitoring (ASM) and SCUBA within the environment in support of the incident management process. These systems utilize automated mechanisms to identify incidents as well as document, track, and report incidents. For high severity incidents, Azure Security maintains an internal notification wiki site on the central Microsoft Teams repository. Azure teams and individuals can sign up to receive automated email alerts when SharePoint content is added or modified. Internal web pages and SOPs offer advice and assistance to service team personnel for the handling and reporting of security incidents, including the Azure Incident Management SOP and the service-team-specific incident management SOPs. |
||
| Mode | Indexed | ||
| Type | Static | ||
| Preview | False | ||
| Deprecated | False | ||
| Effect | Fixed audit |
||
| RBAC role(s) | none | ||
| Rule aliases | none | ||
| Rule resource types | IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups |
||
| Compliance | Not a Compliance control | ||
| Initiatives usage | none | ||
| History | none | ||
| JSON compare | n/a | ||
| JSON |
|