ISO/IEC 27001:2022/Organizational controls/61 of 123
A.5.31Legal, statutory, regulatory and contractual requirements
Control family: Organizational controls
Control description
Legal, statutory, regulatory and contractual requirements relevant to information security and the organization’s approach to meet these requirements shall be identified, documented and kept up to date
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.