Microsoft implements this Physical and Environmental Protection control
Name/Id: ACF1486 / Microsoft Managed Control 1486 Category: Physical and Environmental Protection Title: Alternate Work Site - Security Controls at Alternate Site Ownership: Microsoft Description: The organization: Employs Appropriate management, operational, and technical controls are defined for alternate work sites at alternate work sites; Requirements: Azure identifies designated Microsoft campuses and telecommunicating locations as the alternate worksites. Azure has implemented appropriate management, operational and technical controls at these facilities i.e. all Azure datacenters in the US have the same controls implemented as documented in this SSP. These controls are assessed to assure the effectiveness of the security measures. Access control such as access to the alternate work sites are monitored regularly and visitors are required to check in with receptionist. Telecommunicating locations are governed by the Microsoft remote access policy which requires remote access to production Microsoft’s online services’ networks to employ authentication mechanisms.
Microsoft owns multiple buildings from which Microsoft personnel can work from in the case of an emergency in a building or set of buildings. Microsoft buildings are built and operated to the same security standards.
Rule resource types
IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups