Using Terraform, I want to automate Azure Policy deployment. I know how to build and deploy Azure Policies using Terraform, but I'm not familiar with SOC2 Type-2. Do you have a policy implementation that covers SOC2 Type-2 which I can use or refer to?
CodePudding user response:
You could argue that ISO 27001:2013 and SOC2 are attempting to provide the same objective, so you should look at the built-in ISO 27001 policies in Defender for Cloud > Manage Compliance Policies > [your subscription] > Add More Standards > ISO 27001:2013