NIST 800-53 rev.5/System and Information Integrity/931 of 1011
SI-07 (07)Software, Firmware, and Information Integrity | Integration of Detection and Response
Control family: System and Information Integrity
Control description
Incorporate the detection of the following unauthorized changes into the organizational incident response capability: [Assignment: organization-defined security-relevant changes to the system].
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.