CPS_234_(APRA)_2019.json

{
  "properties": {
    "displayName": "APRA CPS 234 2019",
    "policyType": "BuiltIn",
    "description": "Australian Prudential Regulation Authority (APRA) standard for managing information security risks in regulated entities.",
    "metadata": {
      "version": "1.0.0",
      "category": "Regulatory Compliance"
    },
    "version": "1.0.0",
    "versions": [
      "1.0.0"
    ],
    "policyDefinitionGroups": [
      {
        "name": "CPS_234_(APRA)_2019_23",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CPS_234_(APRA)_2019_23"
      },
      {
        "name": "CPS_234_(APRA)_2019_24",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CPS_234_(APRA)_2019_24"
      },
      {
        "name": "CPS_234_(APRA)_2019_25",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CPS_234_(APRA)_2019_25"
      },
      {
        "name": "CPS_234_(APRA)_2019_26",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CPS_234_(APRA)_2019_26"
      },
      {
        "name": "CPS_234_(APRA)_2019_27",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CPS_234_(APRA)_2019_27"
      },
      {
        "name": "CPS_234_(APRA)_2019_35",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CPS_234_(APRA)_2019_35"
      }
    ],
    "parameters": {
      "effect-4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-a1181c5f-672a-477a-979a-7d58aa086233": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-501541f7-f7e7-4cd6-868c-4190fdad3ac9": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-8dfab9c4-fe7b-49ad-85e4-1e9be085358f": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-3bc8a0d5-38e0-4a3d-a657-2cb64468fc34": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-4da35fc9-c9e7-4960-aec9-797fe7d9051d": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-7fe3b40f-802b-4cdd-8bd4-fd799c948cc2": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-6581d072-105e-4418-827f-bd446d56421b": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-adbe85b5-83e6-4350-ab58-bf3a4f736e5e": {
        "type": "String",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-7926a6d1-b268-4586-8197-e8ae90c877d7": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-d31e5c31-63b2-4f12-887b-e49456834fa1": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-0e6763cc-5078-4e64-889d-ff4d9a839047": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-0a9fbe0d-c5c4-4da8-87d8-f4fd77338835": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-d38668f5-d155-42c7-ab3d-9b57b50f8fbf": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-1f90fc71-a595-4066-8974-d4d0802e8ef0": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-1c988dd6-ade4-430f-a608-2a3e5b0a6d38": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-c3d20c29-b36d-48fe-808b-99a87530ad99": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      }
    },
    "policyDefinitions": [
      {
        "policyDefinitionReferenceId": "4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "CPS_234_(APRA)_2019_23",
          "CPS_234_(APRA)_2019_24",
          "CPS_234_(APRA)_2019_25",
          "CPS_234_(APRA)_2019_26",
          "CPS_234_(APRA)_2019_35"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "a1181c5f-672a-477a-979a-7d58aa086233",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a1181c5f-672a-477a-979a-7d58aa086233",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "CPS_234_(APRA)_2019_27"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-a1181c5f-672a-477a-979a-7d58aa086233')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "501541f7-f7e7-4cd6-868c-4190fdad3ac9",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "CPS_234_(APRA)_2019_27"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-501541f7-f7e7-4cd6-868c-4190fdad3ac9')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "8dfab9c4-fe7b-49ad-85e4-1e9be085358f",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f",
        "definitionVersion": "6.*.*-preview",
        "groupNames": [
          "CPS_234_(APRA)_2019_27"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-8dfab9c4-fe7b-49ad-85e4-1e9be085358f')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "CPS_234_(APRA)_2019_27"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "3bc8a0d5-38e0-4a3d-a657-2cb64468fc34",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3bc8a0d5-38e0-4a3d-a657-2cb64468fc34",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "CPS_234_(APRA)_2019_27"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-3bc8a0d5-38e0-4a3d-a657-2cb64468fc34')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "4da35fc9-c9e7-4960-aec9-797fe7d9051d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "CPS_234_(APRA)_2019_27"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-4da35fc9-c9e7-4960-aec9-797fe7d9051d')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "7fe3b40f-802b-4cdd-8bd4-fd799c948cc2",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "CPS_234_(APRA)_2019_27"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-7fe3b40f-802b-4cdd-8bd4-fd799c948cc2')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "6581d072-105e-4418-827f-bd446d56421b",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "CPS_234_(APRA)_2019_27"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-6581d072-105e-4418-827f-bd446d56421b')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "adbe85b5-83e6-4350-ab58-bf3a4f736e5e",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/adbe85b5-83e6-4350-ab58-bf3a4f736e5e",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "CPS_234_(APRA)_2019_27"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-adbe85b5-83e6-4350-ab58-bf3a4f736e5e')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "7926a6d1-b268-4586-8197-e8ae90c877d7",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7926a6d1-b268-4586-8197-e8ae90c877d7",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "CPS_234_(APRA)_2019_27"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-7926a6d1-b268-4586-8197-e8ae90c877d7')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "d31e5c31-63b2-4f12-887b-e49456834fa1",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d31e5c31-63b2-4f12-887b-e49456834fa1",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "CPS_234_(APRA)_2019_27"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-d31e5c31-63b2-4f12-887b-e49456834fa1')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "0e6763cc-5078-4e64-889d-ff4d9a839047",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "CPS_234_(APRA)_2019_27"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-0e6763cc-5078-4e64-889d-ff4d9a839047')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "0a9fbe0d-c5c4-4da8-87d8-f4fd77338835",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "CPS_234_(APRA)_2019_27"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-0a9fbe0d-c5c4-4da8-87d8-f4fd77338835')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "d38668f5-d155-42c7-ab3d-9b57b50f8fbf",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d38668f5-d155-42c7-ab3d-9b57b50f8fbf",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "CPS_234_(APRA)_2019_27"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-d38668f5-d155-42c7-ab3d-9b57b50f8fbf')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "1f90fc71-a595-4066-8974-d4d0802e8ef0",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1f90fc71-a595-4066-8974-d4d0802e8ef0",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "CPS_234_(APRA)_2019_27"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-1f90fc71-a595-4066-8974-d4d0802e8ef0')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "1c988dd6-ade4-430f-a608-2a3e5b0a6d38",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1c988dd6-ade4-430f-a608-2a3e5b0a6d38",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "CPS_234_(APRA)_2019_27"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-1c988dd6-ade4-430f-a608-2a3e5b0a6d38')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "c3d20c29-b36d-48fe-808b-99a87530ad99",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "CPS_234_(APRA)_2019_27"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-c3d20c29-b36d-48fe-808b-99a87530ad99')]"
          }
        }
      }
    ]
  },
  "id": "/providers/Microsoft.Authorization/policySetDefinitions/f03d9540-4405-4365-8272-318999d1b37a",
  "name": "f03d9540-4405-4365-8272-318999d1b37a"
}