NIST 800-53 rev.5/Maintenance/445 of 1011
MA-04 (04)Nonlocal Maintenance | Authentication and Separation of Maintenance Sessions
Control family: Maintenance
Control description
Protect nonlocal maintenance sessions by:
(a) Employing [Assignment: organization-defined authenticators that are replay resistant]; and
(b) Separating the maintenance sessions from other network sessions with the system by either:
(1) Physically separated communications paths; or
(2) Logically separated communications paths.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.