Compliancemanzill.com
ISO/IEC 27001:2022

ISO/IEC 27001:2022/Technological controls/100 of 123

A.8.11Data masking

Control family: Technological controls

Control description

Data masking shall be used in accordance with the organization’s topic-specific policy on access control and other related topic-specific policies, and business requirements, taking applicable legislation into consideration.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.