61 controls · 13 families Unanswered

Availability3

Open Availability

Confidentiality2

Open Confidentiality

CC1 Control Environment5

Open CC1 Control Environment

CC2 Communication and Information3

Open CC2 Communication and Information

CC3 Risk Assessment4

Open CC3 Risk Assessment

CC4 Monitoring Activities2

Open CC4 Monitoring Activities

CC5 Control Activities3

Open CC5 Control Activities

Logical and physical access controls8

Open Logical and physical access controls

System operations5

Open System operations

Change management1

CC8.1Establish and maintain document for changes in infrastructure, data, software, and procedures

Risk mitigation2

Open Risk mitigation

Privacy18

Open Privacy

Processing integrity5

Open Processing integrity

System and Organization Controls (SOC) 2/Change management/36 of 61

CC8.1Establish and maintain document for changes in infrastructure, data, software, and procedures

Control family: Change management

Control description

The entity authorizes, designs, develops or acquires, configures, documents, tests, approves, and implements changes to infrastructure, data, software, and procedures to meet its objectives.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.