NIST 800-53 rev.5/Audit and Accountability/151 of 1011
AU-03 (03)Content of Audit Records | Limit Personally Identifiable Information Elements
Control family: Audit and Accountability
Control description
Limit personally identifiable information contained in audit records to the following elements identified in the privacy risk assessment: [Assignment: organization-defined elements].
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.