| Source | Azure Portal | ||
| Display name | Microsoft Managed Control 1589 - External Information System Services | Risk Assessments / Organizational Approvals | ||
| Id | 86ec7f9b-9478-40ff-8cfd-6a0d510081a8 | ||
| Version | 1.0.0 Details on versioning |
||
| Category | Regulatory Compliance Microsoft Learn |
||
| Description | Microsoft implements this System and Services Acquisition control | ||
| Additional metadata |
Name/Id: ACF1589 / Microsoft Managed Control 1589 Category: System and Services Acquisition Title: External Information System Services | Risk Assessments / Organizational Approvals - Conduct Risk Assessment Ownership: Customer, Microsoft Description: The organization: Conducts an organizational assessment of risk prior to the acquisition or outsourcing of dedicated information security services; and Requirements: Azure does not consider any information security services to be outsourced as they are defined in the supplemental guidance for the requirement. If any services were to be outsourced after receiving an ATO, Azure Security would complete an assessment of risk and follow change management processes. |
||
| Mode | Indexed | ||
| Type | Static | ||
| Preview | False | ||
| Deprecated | False | ||
| Effect | Fixed audit |
||
| RBAC role(s) | none | ||
| Rule aliases | none | ||
| Rule resource types | IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups |
||
| Compliance | Not a Compliance control | ||
| Initiatives usage | none | ||
| History | none | ||
| JSON compare | n/a | ||
| JSON |
|