| Source | Azure Portal | ||
| Display name | Microsoft Managed Control 1644 - Cryptographic Key Establishment And Management | Availability | ||
| Id | a7211477-c970-446b-b4af-062f37461147 | ||
| Version | 1.0.0 Details on versioning |
||
| Category | Regulatory Compliance Microsoft Learn |
||
| Description | Microsoft implements this System and Communications Protection control | ||
| Additional metadata |
Name/Id: ACF1644 / Microsoft Managed Control 1644 Category: System and Communications Protection Title: Cryptographic Key Establishment And Management | Availability Ownership: Customer, Microsoft Description: The organization maintains availability of information in the event of the loss of cryptographic keys by users. Requirements: Azure service teams store their Storage Account Keys within an approved secret management store, which tracks and monitors access to secrets. The approved secret management stores, Key Vault and dSMS, are backed up regularly and provide the ability to restore data that has been accidentally deleted. This ensures that the Storage Account Key is never lost. Azure Storage also has a soft delete option, which preserves a key if accidentally or maliciously deleted. |
||
| Mode | Indexed | ||
| Type | Static | ||
| Preview | False | ||
| Deprecated | False | ||
| Effect | Fixed audit |
||
| RBAC role(s) | none | ||
| Rule aliases | none | ||
| Rule resource types | IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups |
||
| Compliance | Not a Compliance control | ||
| Initiatives usage | none | ||
| History | none | ||
| JSON compare | n/a | ||
| JSON |
|