Microsoft implements this Program Management control
Name/Id: ACF1742 / Microsoft Managed Control 1742 Category: Program Management Title: Critical Infrastructure Plan Ownership: Customer, Microsoft Description: The organization addresses information security issues in the development, documentation, and updating of a critical infrastructure and key resources protection plan. Requirements: Azure Security Response Team tests incident management methodology and tools to ensure optimal performance during incidents in the Azure environment. The Security Response Team also coordinates and performs joint testing exercises with the Microsoft major applications to ensure coordination across incident management plans. The Security Response Team also coordinates incident handling activities with contingency planning activities managed by the Business Continuity Management team. If incidents or incident management tests trigger contingency plan activation criteria, contingency plans are followed in coordination with the incident management Plan.
Rule resource types
IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups