System and Organization Controls (SOC) 2/Logical and physical access controls/27 of 61
CC6.5Discontinues logical and physical protections over no longer required physical assets
Control family: Logical and physical access controls
Control description
The entity discontinues logical and physical protections over physical assets only after the ability to read or recover data and software from those assets has been diminished and is no longer required to meet the entity's objectives.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.