NIST 800-53 rev.5/Assessment, Authorization, and Monitoring/215 of 1011
CA-06 (02)Authorization | Joint Authorization — Inter-organization
Control family: Assessment, Authorization, and Monitoring
Control description
Employ a joint authorization process for the system that includes multiple authorizing officials with at least one authorizing official from an organization external to the organization conducting the authorization.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.