azure_compliance

Azure Compliance

Possible network Just In Time (JIT) access will be monitored by Azure Security Center as recommendations

compute_vm_jit_access_protected

hipaa_hitrust_v92_0858_09m1organizational

0858.09m1Organizational.4-09.m 09.06 Network Security Management

hipaa_hitrust_v92_11180_01c3system

11180.01c3System.6-01.c 01.02 Authorized Access to Information Systems

hipaa_hitrust_v92_1119_01j2organizational

1119.01j2Organizational.3-01.j 01.04 Network Access Control

hipaa_hitrust_v92_1175_01j1organizational

1175.01j1Organizational.8-01.j 01.04 Network Access Control

hipaa_hitrust_v92_1179_01j3organizational

1179.01j3Organizational.1-01.j 01.04 Network Access Control

hipaa_hitrust_v92_1192_01l1organizational

1192.01l1Organizational.1-01.l 01.04 Network Access Control

nist_sp_800_171_rev_2_3_1_3

3.1.3 Control the flow of CUI in accordance with approved authorizations

nist_sp_800_171_rev_2_3_13_1

3.13.1 Monitor, control, and protect communications (i.e., information transmitted or received by organizational systems) at the external boundaries and key internal boundaries of organizational systems

nist_sp_800_171_rev_2_3_13_2

3.13.2 Employ architectural designs, software development techniques, and systems engineering principles that promote effective information security within organizational systems

nist_sp_800_171_rev_2_3_13_5

3.13.5 Implement subnetworks for publicly accessible system components that are physically or logically separated from internal networks

nist_sp_800_171_rev_2_3_13_6

3.13.6 Deny network communications traffic by default and allow network communications traffic by exception (i.e., deny all, permit by exception)

fedramp_high_ac_2_12

AC-2(12) Account Monitoring

nist_sp_800_53_rev_5_sc_7_3

Access Points SC-7(3)

nist_sp_800_53_rev_5_ac_2_12

Account Monitoring for Atypical Usage AC-2(12)

fedramp_high_sc_7

Boundary Protection (SC-7)

nist_sp_800_53_rev_5_sc_7

all_controls_compute

Compute

nist_sp_800_53_rev_5_ac_4_3

Dynamic Information Flow Control AC-4(3)

rbi_itf_nbfc_v2017_it_governance_1_1

IT Governance-1.1

nist_sp_800_53_rev_5_ac_4

Information Flow Enforcement (AC-4)

fedramp_high_ac_4

rbi_itf_nbfc_v2017_it_information_and_cyber_security_3_1_c

Role based Access Control-3.1.c

fedramp_high_sc_7_3

SC-7(3) Access Points

Management ports of virtual machines should be protected with just-in-time network access control

azure

azuread

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, HIPAA HITRUST, NIST, PCI DSS across all your Azure subscriptions using Powerpipe and Steampipe.

Apache License 2.0

steampipe-mod-azure-compliance

Control: Management ports of virtual machines should be protected with just-in-time network access control

Description

Usage

SQL

Tags