| Source | Azure Portal | ||
| Display name | Microsoft Managed Control 1690 - Information System Monitoring | System-Wide Intrusion Detection System | ||
| Id | a2567a23-d1c3-4783-99f3-d471302a4d6b | ||
| Version | 1.0.0 Details on versioning |
||
| Category | Regulatory Compliance Microsoft Learn |
||
| Description | Microsoft implements this System and Information Integrity control | ||
| Additional metadata |
Name/Id: ACF1690 / Microsoft Managed Control 1690 Category: System and Information Integrity Title: Information System Monitoring - System-Wide Intrusion Detection System Ownership: Customer, Microsoft Description: The organization connects and configures individual intrusion detection tools into an information system-wide intrusion detection system. Requirements: Azure assets upload logs to a central repository managed by C+AI Security. Azure Security and the Security Response Team generate consolidated reports from this data, providing system-wide intrusion detections. Additionally, a combination of detection via the logging and monitoring pipeline and alerting infrastructure and fast response address the risk of intrusion. This includes the use of event forwarding tools, security incident and event management tools, vulnerability scanning and reporting tools, and anti-malware systems. These systems feed into central monitoring which alerts the Security Response Team for any events that need further investigation for central investigation or the service teams directly for alerts that are autorouted based on metadata available in Service Tree. |
||
| Mode | Indexed | ||
| Type | Static | ||
| Preview | False | ||
| Deprecated | False | ||
| Effect | Fixed audit |
||
| RBAC role(s) | none | ||
| Rule aliases | none | ||
| Rule resource types | IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups |
||
| Compliance | Not a Compliance control | ||
| Initiatives usage | none | ||
| History | none | ||
| JSON compare | n/a | ||
| JSON |
|