System and Organization Controls (SOC) 2/Logical and physical access controls/29 of 61
CC6.7Restrict the transmission, movement, and removal of information to authorized internal and external users
Control family: Logical and physical access controls
Control description
The entity restricts the transmission, movement, and removal of information to authorized internal and external users and processes, and protects it during transmission, movement, or removal to meet the entity's objectives.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.