| Source | Azure Portal | ||
| Display name | Microsoft Managed Control 1066 - Remote Access | Disconnect / Disable Access | ||
| Id | 4455c2e8-c65d-4acf-895e-304916f90b36 | ||
| Version | 1.0.0 Details on versioning |
||
| Category | Regulatory Compliance Microsoft Learn |
||
| Description | Microsoft implements this Access Control control | ||
| Additional metadata |
Name/Id: ACF1066 / Microsoft Managed Control 1066 Category: Access Control Title: Remote Access | Disconnect / Disable Access Ownership: Customer, Microsoft Description: The organization provides the capability to expeditiously disconnect or disable remote access to the information system within 15 minutes. Requirements: Azure has the capability to expeditiously disconnect or disable remote access to the information system within a four (4) hour SLA. The Security Response Team investigates incidents flagged by the security incidents events monitoring tool and follows documented procedures to determine the appropriate actions to take against the access session (e.g. monitoring the account for further activity or disconnecting the account). Once the investigation is complete, the Security Response Team immediately notifies the Urgent Terminations team to expeditiously disconnect or disable access to the environment. |
||
| Mode | Indexed | ||
| Type | Static | ||
| Preview | False | ||
| Deprecated | False | ||
| Effect | Fixed audit |
||
| RBAC role(s) | none | ||
| Rule aliases | none | ||
| Rule resource types | IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups |
||
| Compliance | Not a Compliance control | ||
| Initiatives usage | none | ||
| History | none | ||
| JSON compare | n/a | ||
| JSON |
|