last sync: 2024-Mar-01 17:50:27 UTC

Microsoft Managed Control 1359 - Incident Response Testing | Coordination With Related Plans | Regulatory Compliance - Incident Response

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1359 - Incident Response Testing | Coordination With Related Plans
Id 47bc7ea0-7d13-4f7c-a154-b903f7194253
Version 1.0.0
Details on versioning
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this Incident Response control
Additional metadata Name/Id: ACF1359 / Microsoft Managed Control 1359
Category: Incident Response
Title: Incident Response Testing | Coordination With Related Plans
Ownership: Customer, Microsoft
Description: The organization coordinates incident response testing with organizational elements responsible for related plans.
Requirements: The Azure Security Response Team coordinates incident handling activities with contingency planning activities managed by the Business Continuity Management (BCM) team. If incidents or incident management tests trigger Business Continuity and Disaster Recovery (BCDR) plan activation criteria, contingency plans are followed in coordination with the Incident Management SOP. Incident response testing activities are also coordinated with service teams through table top and Azure Red Team exercises. These exercises are intended to replicate a real incident and identify weaknesses in the existing incident response processes. If incidents or incident response tests trigger contingency plan activation criteria, contingency plans are followed in coordination with the Incident Management SOP.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance Not a Compliance control
Initiatives usage none
History none
JSON compare n/a
JSON
api-version=2021-06-01
EPAC