Compliancemanzill.com
NIST 800-53 rev.5

NIST 800-53 rev.5/Configuration Management/280 of 1011

CM-12Information Location

Control family: Configuration Management

Control description

a. Identify and document the location of [Assignment: organization-defined information] and the specific system components on which the information is processed and stored;

b. Identify and document the users who have access to the system and system components where the information is processed and stored; and

c. Document changes to the location (i.e., system or system components) where the information is processed and stored.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.