ISO/IEC 27001:2022/Organizational controls/55 of 123
A.5.25Assessment and decision on information security events
Control family: Organizational controls
Control description
The organization shall assess information security events and decide if they are to be categorized as information security incidents.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.