| Source | Azure Portal | ||
| Display name | Microsoft Managed Control 1113 - Response To Audit Processing Failures | Audit Storage Capacity | ||
| Id | 562afd61-56be-4313-8fe4-b9564aa4ba7d | ||
| Version | 1.0.0 Details on versioning |
||
| Category | Regulatory Compliance Microsoft Learn |
||
| Description | Microsoft implements this Audit and Accountability control | ||
| Additional metadata |
Name/Id: ACF1113 / Microsoft Managed Control 1113 Category: Audit and Accountability Title: Response To Audit Processing Failures | Audit Storage Capacity Ownership: Customer, Microsoft Description: The information system provides a warning to C+AI Security Engineering team within 24 hours; in real time when allocated audit record storage volume reaches a service team-defined percentage; a point of failure of repository maximum audit record storage capacity. Requirements: Most services use Azure Storage auto-expansion for service team storage of logs. When the storage account reaches a specific threshold of 90%, Azure Storage automatically provisions additional space. For services who have not transitioned to auto-expansion, automated messages are sent out in near-real time, alerting service teams whenever a pre-determined threshold of 80% and 95% of storage capacity is crossed. If the storage repository is full because a service team was unable to resolve the alert in time, Azure is configured to overwrite the oldest data to preserve the most recent information for after-the-fact investigations. |
||
| Mode | Indexed | ||
| Type | Static | ||
| Preview | False | ||
| Deprecated | False | ||
| Effect | Fixed audit |
||
| RBAC role(s) | none | ||
| Rule aliases | none | ||
| Rule resource types | IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups |
||
| Compliance | Not a Compliance control | ||
| Initiatives usage | none | ||
| History | none | ||
| JSON compare | n/a | ||
| JSON |
|