controls
Change management (CC8.x)
Controls covering authorized, traceable infrastructure changes.
What we check
- Resource locks on production resource groups
- Activity log diagnostic settings retained ≥ 1 year
- Deployment history available for last 90 days