NIST 800-53 rev.5/System and Communications Protection/768 of 1011
SC-07 (09)Boundary Protection | Restrict Threatening Outgoing Communications Traffic
Control family: System and Communications Protection
Control description
(a) Detect and deny outgoing communications traffic posing a threat to external systems; and
(b) Audit the identity of internal users associated with denied communications.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.