ISO/IEC 27001:2022/Organizational controls/58 of 123
A.5.28Collection of evidence
Control family: Organizational controls
Control description
The organization shall establish and implement procedures for the identification, collection, acquisition and preservation of evidence related to information security events.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.