System and Organization Controls (SOC) 2/System operations/31 of 61
CC7.1Detects and Monitors for Unauthorized Configuration Changes
Control family: System operations
Control description
To meet its objectives, the entity uses detection and monitoring procedures to identify:
(1) changes to configurations that result in the introduction of new vulnerabilities, and
(2) susceptibilities to newly discovered vulnerabilities.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.