NIST 800-53 rev.5/Configuration Management/260 of 1011
CM-07 (06)Least Functionality | Confined Environments with Limited Privileges
Control family: Configuration Management
Control description
Require that the following user-installed software execute in a confined physical or virtual machine environment with limited privileges: [Assignment: organization-defined user-installed software].
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.