last sync: 2024-Jul-26 18:17:39 UTC

Microsoft Managed Control 1576 - Acquisitions Process | Design / Implementation Information For Security Controls | Regulatory Compliance - System and Services Acquisition

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1576 - Acquisitions Process | Design / Implementation Information For Security Controls
Id 5f18c885-ade3-48c5-80b1-8f9216019c18
Version 1.0.1
Details on versioning
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this System and Services Acquisition control
Additional metadata Name/Id: ACF1576 / Microsoft Managed Control 1576
Category: System and Services Acquisition
Title: Acquisitions Process | Design / Implementation Information For Security Controls
Ownership: Customer, Microsoft
Description: The organization requires the developer of the information system, system component, or information system service to provide design and implementation information for the security controls to be employed that includes: security-relevant external system interfaces and high-level design and implementation information required by the SDL process at a level of detail sufficient for secure deployment.
Requirements: The acquisition process includes contractual requirements to provide documentation of security functionality, including security-relevant external system interfaces and high-level design. Documentation provided in response to this requirement is stored by Azure service teams in their internal SharePoint sites.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance Not a Compliance control
Initiatives usage none
History
Date/Time (UTC ymd) (i) Change type Change detail
2022-04-01 20:29:14 change Patch (1.0.0 > 1.0.1)
JSON compare
compare mode: version left: version right:
JSON
api-version=2021-06-01
EPAC