AzPolicyAdvertizer

last sync: 2025-Oct-23 17:23:10 UTC

Keep SORNs updated | Regulatory Compliance - Operational

Azure BuiltIn Policy definition

Source Azure Portal
Display name Keep SORNs updated
Id 3bd4e0af-7cbb-a3ec-4918-056a3c017ae2
Version 1.1.0
Details on versioning
Versioning Versions supported for Versioning: 1
1.1.0
Built-in Versioning [Preview]
Category Regulatory Compliance
Microsoft Learn
Description CMA_C1863 - Keep SORNs updated
Cloud environments AzureCloud = true
AzureUSGovernment = unknown
AzureChinaCloud = unknown
Available in AzUSGov Unknown, no evidence if Policy definition is/not available in AzureUSGovernment
Additional metadata Name/Id: CMA_C1863 / CMA_C1863
Category: Operational
Title: Keep SORNs updated
Ownership: Customer
Description: The customer is responsible for keeping SORNs current.
Requirements: The customer is responsible for implementing this recommendation.
Mode All
Type BuiltIn
Preview False
Deprecated False
Effect Default
Manual
Allowed
Manual, Disabled
RBAC role(s) none
Rule aliases none
Rule resource types IF (1)
Compliance
The following 2 compliance controls are associated with this Policy definition 'Keep SORNs updated' (3bd4e0af-7cbb-a3ec-4918-056a3c017ae2)
Control Domain Control Name MetadataId Category Title Owner Requirements Description Info Policy#
hipaa 1907.06.c1Organizational.3-06.c hipaa-1907.06.c1Organizational.3-06.c 1907.06.c1Organizational.3-06.c 19 Data Protection & Privacy 1907.06.c1Organizational.3-06.c 06.01 Compliance with Legal Requirements Shared n/a The organization documents restrictions in writing and formally maintains such writing, or an electronic copy of such writing, as an organizational record for a period of six years. 4
hipaa 1908.06.c1Organizational.4-06.c hipaa-1908.06.c1Organizational.4-06.c 1908.06.c1Organizational.4-06.c 19 Data Protection & Privacy 1908.06.c1Organizational.4-06.c 06.01 Compliance with Legal Requirements Shared n/a The organization documents and maintains (i) designated record sets that are subject to access by individuals, and (ii) titles of the persons or office responsible for receiving and processing requests for access by individuals as organizational records for a period of six years. 11
Initiatives usage
Initiative DisplayName Initiative Id Initiative Category State Type polSet in AzUSGov
HITRUST/HIPAA a169a624-5599-4385-a696-c8d643089fab Regulatory Compliance GA BuiltIn unknown
History
Date/Time (UTC ymd) (i) Change type Change detail
2022-09-27 16:35:32 change Minor (1.0.0 > 1.1.0)
2022-09-19 17:41:40 add 3bd4e0af-7cbb-a3ec-4918-056a3c017ae2
JSON compare
compare mode: version left: version right:
JSON
api-version=2021-06-01
EPAC