Control: Azure > CIS v4.0 > 09 - Security Services > 09.01 - Microsoft Defender for Cloud > 09.01.11 - Ensure that Microsoft Cloud Security Benchmark policies are not set to 'Disabled'

Configures auditing against a CIS Benchmark item.

Level: 1

The Microsoft Cloud Security Benchmark (MCSB) is an Azure Policy Initiative containing many security policies to evaluate resource configuration against best practice recommendations. If a policy in the MCSB is set with effect type Disabled, it is not evaluated and may prevent administrators from being informed of valuable security recommendations.

A security policy defines the desired configuration of resources in your environment and helps ensure compliance with company or regulatory security requirements. When a policy Effect is set to Audit, policies in the MCSB ensure that Defender for Cloud evaluates relevant resources for supported recommendations.

By default, the MCSB policy initiative is assigned on all subscriptions, and most policies will have an effect of Audit. Some policies will have a default effect of Disabled.