NIST 800-53 rev.5/Assessment, Authorization, and Monitoring/210 of 1011
CA-03 (07)Information Exchange | Transitive Information Exchanges
Control family: Assessment, Authorization, and Monitoring
Control description
(a) Identify transitive (downstream) information exchanges with other systems through the systems identified in CA-3a; and
(b) Take measures to ensure that transitive (downstream) information exchanges cease when the controls on identified transitive (downstream) systems cannot be verified or validated.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.