ISO/IEC 27001:2022/Technological controls/92 of 123
A.8.3Information access restriction
Control family: Technological controls
Control description
Access to information and other associated assets shall be restricted in accordance with the established topic-specific policy on access control
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.