NIST 800-53 rev.5/System and Information Integrity/932 of 1011
SI-07 (08)Software, Firmware, and Information Integrity | Auditing Capability for Significant Events
Control family: System and Information Integrity
Control description
Upon detection of a potential integrity violation, provide the capability to audit the event and initiate the following actions: [Selection (one or more): generate an audit record; alert current user; alert [Assignment: organization-defined personnel or roles]; [Assignment: organization-defined other actions]].
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.