| Source | Azure Portal | ||||||
| Display name | Microsoft Managed Control 1855 - Inventory of Personally Identifiable Information | ||||||
| Id | 0a2119c1-f068-4bfe-9f03-db94317e8db9 | ||||||
| Version | 1.0.0 Details on versioning |
||||||
| Category | Regulatory Compliance Microsoft Learn |
||||||
| Description | Microsoft implements this Security control | ||||||
| Additional metadata |
Name/Id: ACF1855 / Microsoft Managed Control 1855 Category: Security Title: Inventory of Personally Identifiable Information - Notify CIO or Official Ownership: Customer, Microsoft Description: Provides each update of the PII inventory to the stakeholders monthly to support the establishment of information security requirements for all new or modified information systems containing PII. Requirements: Microsoft maintains the Data Inventory Implementation Guide which outlines standards for data inventories at Microsoft. The document requires that each privacy program create and maintain a data inventory, asset inventory, data flow diagrams, and governance documentation for data inventory, asset inventory and data flow diagrams. Azure implements these requirements using the Privacy Manager and Privacy Review process, ensuring the PII inventory is reviewed annually as part of the Privacy Review for each service. The reviews are conducted by Privacy Managers who are listed in the Privacy Manager tool, integrated with Service Tree. |
||||||
| Mode | Indexed | ||||||
| Type | Static | ||||||
| Preview | False | ||||||
| Deprecated | False | ||||||
| Effect | Fixed audit |
||||||
| RBAC role(s) | none | ||||||
| Rule aliases | none | ||||||
| Rule resource types | IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups |
||||||
| Compliance | Not a Compliance control | ||||||
| Initiatives usage | none | ||||||
| History |
|
||||||
| JSON compare | n/a | ||||||
| JSON |
|