last sync: 2024-Jul-26 18:17:39 UTC

Microsoft Managed Control 1486 - Alternate Work Site | Regulatory Compliance - Physical and Environmental Protection

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1486 - Alternate Work Site
Id cb790345-a51f-43de-934e-98dbfaf9dca5
Version 1.0.0
Details on versioning
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this Physical and Environmental Protection control
Additional metadata Name/Id: ACF1486 / Microsoft Managed Control 1486
Category: Physical and Environmental Protection
Title: Alternate Work Site - Security Controls at Alternate Site
Ownership: Microsoft
Description: The organization: Employs Appropriate management, operational, and technical controls are defined for alternate work sites at alternate work sites;
Requirements: Azure identifies designated Microsoft campuses and telecommunicating locations as the alternate worksites. Azure has implemented appropriate management, operational and technical controls at these facilities i.e. all Azure datacenters in the US have the same controls implemented as documented in this SSP. These controls are assessed to assure the effectiveness of the security measures. Access control such as access to the alternate work sites are monitored regularly and visitors are required to check in with receptionist. Telecommunicating locations are governed by the Microsoft remote access policy which requires remote access to production Microsoft’s online services’ networks to employ authentication mechanisms. Microsoft owns multiple buildings from which Microsoft personnel can work from in the case of an emergency in a building or set of buildings. Microsoft buildings are built and operated to the same security standards.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance Not a Compliance control
Initiatives usage none
History none
JSON compare n/a
JSON
api-version=2021-06-01
EPAC