| Source | Azure Portal | ||
| Display name | Microsoft Managed Control 1105 - Audit Events | ||
| Id | 5b73f57b-587d-4470-a344-0b0ae805f459 | ||
| Version | 1.0.0 Details on versioning |
||
| Category | Regulatory Compliance Microsoft Learn |
||
| Description | Microsoft implements this Audit and Accountability control | ||
| Additional metadata |
Name/Id: ACF1105 / Microsoft Managed Control 1105 Category: Audit and Accountability Title: Audit Events - Selected Audit Events Ownership: Customer, Microsoft Description: The organization: Determines that the following events are to be audited within the information system: Auditing of each identified event: Successful and unsuccessful account logon events, account management events, object access, policy change, privilege functions, process tracking, and system events.Auditing of web applications: all administrator activity, authentication checks, authorization checks, data deletions, data access, data changes, and permission changes. Requirements: Servers The configuration file for AzSecPack specifies the audit events. Events are audited continually in near-real time. These events are based on the assessment of risk to the system and the Microsoft Security Standards used across the organization. These events align with the server baselines updated semi-annually and available to all Microsoft users. Network Devices While each network device type has specific events and metadata options, Azure Networking selects the level of auditing to meet or exceed the audited events defined by the Azure SLAM team and configures the devices appropriately. |
||
| Mode | Indexed | ||
| Type | Static | ||
| Preview | False | ||
| Deprecated | False | ||
| Effect | Fixed audit |
||
| RBAC role(s) | none | ||
| Rule aliases | none | ||
| Rule resource types | IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups |
||
| Compliance | Not a Compliance control | ||
| Initiatives usage | none | ||
| History | none | ||
| JSON compare | n/a | ||
| JSON |
|