Microsoft implements this Accountability, Audit, and Risk Management control
Name/Id: ACF1811 / Microsoft Managed Control 1811 Category: Accountability, Audit, and Risk Management Title: Privacy Requirements for Contractors And Service Providers - Requirements in Contracts Ownership: Customer, Microsoft Description: Includes privacy requirements in contracts and other acquisition-related documents. Requirements: Contractors and service providers, internally known as vendors and identified by v- accounts, are vetted before any services are offered, and contractors are required to sign non-disclosure agreements (NDAs) as a part of the onboarding process. The NDA holds the vendor to the same standards of privacy as a full time employee of Azure.
Rule resource types
IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups