| Source | Azure Portal | ||
| Display name | Microsoft Managed Control 1386 - Information Spillage Response | ||
| Id | 5120193e-91fd-4f9d-bc6d-194f94734065 | ||
| Version | 1.0.0 Details on versioning |
||
| Category | Regulatory Compliance Microsoft Learn |
||
| Description | Microsoft implements this Incident Response control | ||
| Additional metadata |
Name/Id: ACF1386 / Microsoft Managed Control 1386 Category: Incident Response Title: Information Spillage Response - Isolate Systems Ownership: Customer, Microsoft Description: The organization responds to information spills by: Isolating the contaminated information system or system component; Requirements: In the instance of a contaminated asset or network, the Security Response Team isolates the spillage using rapid containment options available to properly address the reach of an information spillage. Some of the rapid containment options include powering off the asset, institute Border Gateway Protocol (BGP) black hole routing, and network configuration changes to contain the breach. |
||
| Mode | Indexed | ||
| Type | Static | ||
| Preview | False | ||
| Deprecated | False | ||
| Effect | Fixed audit |
||
| RBAC role(s) | none | ||
| Rule aliases | none | ||
| Rule resource types | IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups |
||
| Compliance | Not a Compliance control | ||
| Initiatives usage | none | ||
| History | none | ||
| JSON compare | n/a | ||
| JSON |
|