last sync: 2024-May-24 18:03:04 UTC

Microsoft Managed Control 1487 - Alternate Work Site | Regulatory Compliance - Physical and Environmental Protection

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1487 - Alternate Work Site
Id e9c3371d-c30c-4f58-abd9-30b8a8199571
Version 1.0.0
Details on versioning
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this Physical and Environmental Protection control
Additional metadata Name/Id: ACF1487 / Microsoft Managed Control 1487
Category: Physical and Environmental Protection
Title: Alternate Work Site - Controls Assessed as Feasible
Ownership: Microsoft
Description: The organization: Assesses as feasible, the effectiveness of security controls at alternate work sites; and
Requirements: Azure testing procedures based on NIST SP 800-53A are assessed at each datacenter, regardless if they are designated as primary or alternate sites for applications supported in the environment. Azure implements the same controls at each of these work sites, as each site supports various Microsoft properties. Depending on capacity, each datacenter can be used as an alternate to another and is built to identical physical, environmental, and security standards. The security controls at each datacenter are identical and in accordance with the procedures outlined in the Azure Physical Security Operations SOP. All datacenter work is performed by Microsoft personnel who are cleared, trained, and authorized to work within the datacenter environment.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance Not a Compliance control
Initiatives usage none
History none
JSON compare n/a
JSON
api-version=2021-06-01
EPAC