last sync: 2024-Apr-24 17:46:58 UTC

Microsoft Managed Control 1091 - Security Awareness | Regulatory Compliance - Awareness and Training

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1091 - Security Awareness
Id b23bd715-5d1c-4e5c-9759-9cbdf79ded9d
Version 1.0.1
Details on versioning
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this Awareness and Training control
Additional metadata Name/Id: ACF1091 / Microsoft Managed Control 1091
Category: Awareness and Training
Title: Security Awareness Training - Training on Defined Frequency
Ownership: Customer, Microsoft
Description: The organization provides basic security awareness training to information system users (including managers, senior executives, and contractors): Annually thereafter.
Requirements: The annual security foundations training includes basic level training on how to detect, report and implement best practices to safeguard Microsoft and its customers. This course also covers the security requirements and expectations for elevated privileges in production environments. Engineering personnel participate in ongoing role-based security training through the STRIKE program. STRIKE provides regular 200-400 level sessions, labs, online courses, and materials to engage, educate and empower engineers to securely design and operate services. The C+AI Security Education and Awareness program provides additional training through security awareness campaigns.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance Not a Compliance control
Initiatives usage none
History
Date/Time (UTC ymd) (i) Change type Change detail
2022-04-01 20:29:14 change Patch (1.0.0 > 1.0.1)
JSON compare
compare mode: version left: version right:
JSON
api-version=2021-06-01
EPAC