| Source | Azure Portal | ||||||
| Display name | Microsoft Managed Control 1647 - Use of Cryptography | ||||||
| Id | 791cfc15-6974-42a0-9f4c-2d4b82f4a78c | ||||||
| Version | 1.0.1 Details on versioning |
||||||
| Category | Regulatory Compliance Microsoft Learn |
||||||
| Description | Microsoft implements this System and Communications Protection control | ||||||
| Additional metadata |
Name/Id: ACF1647 / Microsoft Managed Control 1647 Category: System and Communications Protection Title: Use of Cryptography Ownership: Customer, Microsoft Description: The information system implements FIPS-validated cryptography in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, and standards. Requirements: Encryption mechanisms and techniques used by the Azure service teams follow the requirements and restrictions outlined in the Microsoft Key Management Standard, Microsoft Operational Encryption Standard, Azure Cryptographic Controls Standard Operating Procedure. The Microsoft Key Management Standard applies to the operation of all Microsoft’s online services’ systems residing within Azure utilizing cryptographic mechanisms for securing data or systems. This standard applies to all environments managed by Azure, including labs, production, and pre-production. Azure implements cryptography through encryption mechanisms and techniques following the requirements outlined in the Cryptographic Controls of the Microsoft Security Program Policy (MSPP). FIPS 140-2 validated cryptographic modules are used to support compliance with federal laws, executive orders, directives, policies, regulations, and standards. Additional information can be found at the link below: |
||||||
| Mode | Indexed | ||||||
| Type | Static | ||||||
| Preview | False | ||||||
| Deprecated | False | ||||||
| Effect | Fixed audit |
||||||
| RBAC role(s) | none | ||||||
| Rule aliases | none | ||||||
| Rule resource types | IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups |
||||||
| Compliance | Not a Compliance control | ||||||
| Initiatives usage | none | ||||||
| History |
|
||||||
| JSON compare |
compare mode:
version left:
version right:
|
||||||
| JSON |
|