Storage accounts should have geo-redundant storage enabled

NIST SP 800-53 Rev 5

• CP-6 Alternate Storage Site
• CP-6(1) Separation From Primary Site

NIST Cybersecurity Framework v2.0

• PR.DS-11: Backups of data are created, protected, maintained, and tested.
• PR.IR-03
• RC.RP-01: The recovery portion of the incident response plan is executed once initiated from the incident response process.
• RC.RP-02
• RC.RP-03: The integrity of backups and other restoration assets is verified before using them for restoration.

FedRAMP Moderate Baseline Rev 4

• CP-6 Alternate Storage Sites
• CP-6(1) Separation From Primary Site

CIS Azure Benchmark v4.0.0

• 10.3.12 Ensure Redundancy is set to 'geo-redundant storage (GRS)' on critical Azure Storage Accounts

CIS Azure Benchmark v5.0.0

• 9.3.11 Ensure Redundancy is set to 'geo-redundant storage (GRS)' on critical Azure Storage Accounts

RBI Cyber Security Framework for UCBs

• Annex I (12)

BSI C5:2025

• PS-02.01AS The cloud service is provided from more than two locations that provide each other with redundancy. The locations are sufficiently far apart to achieve georedundancy. If two locations fail at the same time, at least one third location is still available to prevent a total service failure.
• PS-02.01B The cloud service is provided from at least two locations that provide each other with operational redundancy and resilience. The locations meet the security requirements of the cloud service provider (cf. PS-01) and are located in an adequate distance to each other to achieve...
• PS-02.02AS The georedundancy is designed in a way that ensures that the availability requirements specified in the service level agreement are met.
• PS-02.02B Operational redundancy is designed in a way that ensures that the availability requirements specified in the service level agreement are met.

FedRAMP High

• CP-6 Alternate Storage Sites
• CP-6(1) Separation From Primary Site

HIPAA Security Rule 2003

• 164.308(a)(7)(i) Contingency plan
• 164.308(a)(7)(ii)(A) Data backup plan
• 164.308(a)(7)(ii)(B) Disaster recovery plan
• 164.308(a)(7)(ii)(C) Emergency mode operation plan