Monitoring & Audit Logging · AP-ML-002
Repeated failed sign-in attempts and impossible-travel events trigger alerts to the compliance officer.
Enable Microsoft Defender for Identity alerting or a comparable SIEM rule.
Log-in Monitoring
Detection of Anomalies
Monitoring System Use