Detections
Analytics

MS.POWERPLATFORM.2.2v1 - Non-default environments SHOULD have at least one DLP policy affecting them.

Information

Users may inadvertently use connectors that share sensitive information with others who should not have access to it. DLP policies provide a way for agencies to detect and prevent unauthorized disclosures.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

1. Repeat steps 1 to 11 in the MS.POWERPLATFORM.2.1v1 instructions.

2. At the Scope section for the default environment, select Add multiple environments and select the non-default environments where you wish to enforce a DLP policy upon. If you wish to apply the DLP policy for all environments including environments created in the future select Add all environments.

4. Select Next-\> Create Policy to finish.

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-7(10)

Plugin: microsoft_azure

Control ID: 004e1f0b1d6ba90211d9e08bac147cbc5fa61b8bf79de245390455372ddf1b9e