| Source | Azure Portal | ||
| Display name | Microsoft Managed Control 1612 - Developer Security Architecture And Design | ||
| Id | a2037b3d-8b04-4171-8610-e6d4f1d08db5 | ||
| Version | 1.0.0 Details on versioning |
||
| Category | Regulatory Compliance Microsoft Learn |
||
| Description | Microsoft implements this System and Services Acquisition control | ||
| Additional metadata |
Name/Id: ACF1612 / Microsoft Managed Control 1612 Category: System and Services Acquisition Title: Developer Security Architecture And Design - Consistent with Organization's Architecture Ownership: Customer, Microsoft Description: The organization requires the developer of the information system, system component, or information system service to produce a design specification and security architecture that: Is consistent with and supportive of the organization's security architecture which is established within and is an integrated part of the organization's enterprise architecture; Requirements: Microsoft's software development practices include evaluating the design and security architecture of new systems and system components in the environment. The C+AI Security Assurance team works with the component/feature teams to provide guidance during the implementation of SDL activities in software development projects including identifying requirements for deep review such as threat modeling, and penetration testing. |
||
| Mode | Indexed | ||
| Type | Static | ||
| Preview | False | ||
| Deprecated | False | ||
| Effect | Fixed audit |
||
| RBAC role(s) | none | ||
| Rule aliases | none | ||
| Rule resource types | IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups |
||
| Compliance | Not a Compliance control | ||
| Initiatives usage | none | ||
| History | none | ||
| JSON compare | n/a | ||
| JSON |
|