61 controls · 13 families Unanswered

Availability3

Open Availability

Confidentiality2

Open Confidentiality

CC1 Control Environment5

Open CC1 Control Environment

CC2 Communication and Information3

Open CC2 Communication and Information

CC3 Risk Assessment4

Open CC3 Risk Assessment

CC4 Monitoring Activities2

Open CC4 Monitoring Activities

CC5 Control Activities3

Open CC5 Control Activities

Logical and physical access controls8

Open Logical and physical access controls

System operations5

Open System operations

Change management1

Open Change management

Risk mitigation2

Privacy18

Open Privacy

Processing integrity5

Open Processing integrity

System and Organization Controls (SOC) 2/Risk mitigation/38 of 61

CC9.2Assess and manages risks associated with vendors

Control family: Risk mitigation

Control description

The entity assesses and manages risks associated with vendors and business partners.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.