| Source | Azure Portal | ||
| Display name | Microsoft Managed Control 1370 - Incident Monitoring | Automated Tracking / Data Collection / Analysis | ||
| Id | 924e1b2d-c502-478f-bfdb-a7e09a0d5c01 | ||
| Version | 1.0.0 Details on versioning |
||
| Category | Regulatory Compliance Microsoft Learn |
||
| Description | Microsoft implements this Incident Response control | ||
| Additional metadata |
Name/Id: ACF1370 / Microsoft Managed Control 1370 Category: Incident Response Title: Incident Monitoring | Automated Tracking / Data Collection / Analysis Ownership: Customer, Microsoft Description: The organization employs automated mechanisms to assist in the tracking of security incidents and in the collection and analysis of incident information. Requirements: Incident Management (IcM) collects alerts which are then sent to incident management personnel as needed, who then generate a ticket in Service Now (SNow) to track the incident to resolution. |
||
| Mode | Indexed | ||
| Type | Static | ||
| Preview | False | ||
| Deprecated | False | ||
| Effect | Fixed audit |
||
| RBAC role(s) | none | ||
| Rule aliases | none | ||
| Rule resource types | IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups |
||
| Compliance | Not a Compliance control | ||
| Initiatives usage | none | ||
| History | none | ||
| JSON compare | n/a | ||
| JSON |
|