last sync: 2024-May-24 18:03:04 UTC

Microsoft Managed Control 1066 - Remote Access | Disconnect / Disable Access | Regulatory Compliance - Access Control

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1066 - Remote Access | Disconnect / Disable Access
Id 4455c2e8-c65d-4acf-895e-304916f90b36
Version 1.0.0
Details on versioning
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this Access Control control
Additional metadata Name/Id: ACF1066 / Microsoft Managed Control 1066
Category: Access Control
Title: Remote Access | Disconnect / Disable Access
Ownership: Customer, Microsoft
Description: The organization provides the capability to expeditiously disconnect or disable remote access to the information system within 15 minutes.
Requirements: Azure has the capability to expeditiously disconnect or disable remote access to the information system within a four (4) hour SLA. The Security Response Team investigates incidents flagged by the security incidents events monitoring tool and follows documented procedures to determine the appropriate actions to take against the access session (e.g. monitoring the account for further activity or disconnecting the account). Once the investigation is complete, the Security Response Team immediately notifies the Urgent Terminations team to expeditiously disconnect or disable access to the environment.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance Not a Compliance control
Initiatives usage none
History none
JSON compare n/a
JSON
api-version=2021-06-01
EPAC