| Source | Azure Portal | ||
| Display name | Microsoft Managed Control 1598 - Developer Configuration Management | ||
| Id | ae7e1f5e-2d63-4b38-91ef-bce14151cce3 | ||
| Version | 1.0.0 Details on versioning |
||
| Category | Regulatory Compliance Microsoft Learn |
||
| Description | Microsoft implements this System and Services Acquisition control | ||
| Additional metadata |
Name/Id: ACF1598 / Microsoft Managed Control 1598 Category: System and Services Acquisition Title: Developer Configuration Management - Track Flaws And Resolutions Ownership: Customer, Microsoft Description: The organization requires the developer of the information system, system component, or information system service to: Track security flaws and flaw resolution within the system, component, or service and report findings to Microsoft Azure Security Operations. Requirements: Azure service team developers track security flaws and flaw resolution during the development process using Azure DevOps. Any identified flaws, whether discovered by a human or by the automated tools, have a corresponding bug opened in Azure DevOps. The resolution of the flaw is then documented and tracked using the bug. A summary of identified flaws and their resolution is provided to service team management, Azure Security, and authorizing officials. |
||
| Mode | Indexed | ||
| Type | Static | ||
| Preview | False | ||
| Deprecated | False | ||
| Effect | Fixed audit |
||
| RBAC role(s) | none | ||
| Rule aliases | none | ||
| Rule resource types | IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups |
||
| Compliance | Not a Compliance control | ||
| Initiatives usage | none | ||
| History | none | ||
| JSON compare | n/a | ||
| JSON |
|