| Source | Azure Portal | ||
| Display name | Microsoft Managed Control 1364 - Incident Handling | Dynamic Reconfiguration | ||
| Id | 4c615c2a-dc83-4dda-8220-abce7b50c9bc | ||
| Version | 1.0.0 Details on versioning |
||
| Category | Regulatory Compliance Microsoft Learn |
||
| Description | Microsoft implements this Incident Response control | ||
| Additional metadata |
Name/Id: ACF1364 / Microsoft Managed Control 1364 Category: Incident Response Title: Incident Handling | Dynamic Reconfiguration Ownership: Customer, Microsoft Description: The organization includes dynamic reconfiguration of All network, data storage, and computing devices as part of the incident response capability. Requirements: Azure personnel are able to access network, data storage, and computing devices within the system and change their configuration as required during the incident management process, up to and including updating firewall rules, restricting network access, removing users, and more. The Security Response Team maintains the capability to dynamically reconfigure information system components as outlined in the Rapid Containment Protocol section of the C+AI Security Playbooks. Capabilities include the ability to disable accounts, change ACLs and quarantine assets if determined necessary in an incident management scenario. |
||
| Mode | Indexed | ||
| Type | Static | ||
| Preview | False | ||
| Deprecated | False | ||
| Effect | Fixed audit |
||
| RBAC role(s) | none | ||
| Rule aliases | none | ||
| Rule resource types | IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups |
||
| Compliance | Not a Compliance control | ||
| Initiatives usage | none | ||
| History | none | ||
| JSON compare | n/a | ||
| JSON |
|