NIST 800-53 rev.5/System and Services Acquisition/700 of 1011
SA-09 (08)External System Services | Processing and Storage Location — U.S. Jurisdiction
Control family: System and Services Acquisition
Control description
Restrict the geographic location of information processing and data storage to facilities located within in the legal jurisdictional boundary of the United States.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.