| Source | Azure Portal | ||
| Display name | Microsoft Managed Control 1698 - Information System Monitoring | Individuals Posing Greater Risk | ||
| Id | 31b752c1-05a9-432a-8fce-c39b56550119 | ||
| Version | 1.0.0 Details on versioning |
||
| Category | Regulatory Compliance Microsoft Learn |
||
| Description | Microsoft implements this System and Information Integrity control | ||
| Additional metadata |
Name/Id: ACF1698 / Microsoft Managed Control 1698 Category: System and Information Integrity Title: Information System Monitoring | Individuals Posing Greater Risk Ownership: Customer, Microsoft Description: The organization implements Defined by Microsoft Major Applications of individuals who have been identified by HR and engineering groups as posing an increased level of risk. Requirements: In the case where Azure identifies an individual as posing an increased level of risk, that individual’s access is revoked. The Security Response Team takes special interest in data generated by existing monitoring solutions to identify any malicious actions the individual may attempt. The Security Response Team responds to requests by HR and engineering groups to take emergency action on high risk accounts, such as emergency account disablement. The Security Response Team also maintains auditable events of account activity that can be used in Security Response Team investigations. |
||
| Mode | Indexed | ||
| Type | Static | ||
| Preview | False | ||
| Deprecated | False | ||
| Effect | Fixed audit |
||
| RBAC role(s) | none | ||
| Rule aliases | none | ||
| Rule resource types | IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups |
||
| Compliance | Not a Compliance control | ||
| Initiatives usage | none | ||
| History | none | ||
| JSON compare | n/a | ||
| JSON |
|