Compliancemanzill.com
ISO/IEC 27001:2022

ISO/IEC 27001:2022/Organizational controls/53 of 123

A.5.23Information security for use of cloud services

Control family: Organizational controls

Control description

Processes for acquisition, use, management and exit from cloud services shall be established in accordance with the organization’s information security requirements.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.