System and Organization Controls (SOC) 2/Privacy/50 of 61
P6.3Create and retain record of detected or reported unauthorized disclosure of personal information
Control family: Privacy
Control description
The entity creates and retains a complete, accurate, and timely record of detected or reported unauthorized disclosures (including breaches) of personal information to meet the entity's objectives related to privacy.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.