System and Organization Controls (SOC) 2/Logical and physical access controls/26 of 61
CC6.4Restricts physical access to facilities and protected information assets
Control family: Logical and physical access controls
Control description
The entity restricts physical access to facilities and protected information assets (for example, data center facilities, backup media storage, and other sensitive locations) to authorized personnel to meet the entity's objectives.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.