NIST 800-53 rev.5/System and Information Integrity/916 of 1011
SI-04 (22)System Monitoring | Unauthorized Network Services
Control family: System and Information Integrity
Control description
(a) Detect network services that have not been authorized or approved by [Assignment: organization-defined authorization or approval processes]; and
(b) [Selection (one or more): Audit; Alert [Assignment: organization-defined personnel or roles]] when detected.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.