Policy: Azure > CIS v3.0 > 03 - Security > 03.01 - Microsoft Defender for Cloud > 03.01.11 - Ensure that Microsoft Cloud Security Benchmark policies are not set to 'Disabled' > Attestation

From Azure Portal

Part A - List all disabled policies 1. From Azure Home select the Portal Menu 2. Select Microsoft Defender for Cloud 3. Under Management, select Environment Settings 4. Select the appropriate Subscription 5. Click on Security policies in the left column 6. Click on Microsoft cloud security benchmark 7. Click Add Filter and select Effect 8. Check the Disabled box to search for all disabled policies 9. Click Apply

Part B - Remediate Policy Effect For each policy that remains in the list: 1. Click the blue ellipses ... to the right of the policy name 2. Click Manage effect and parameters 3. Under Policy effect, select the Audit radio button 4. Click Save 5. Click Refresh

Repeat "Part B - Remediate Policy Effect" until no more policies are listed.

Once verified, enter the date that this attestation expires. Note that the date can not be further in the future than is specified in report level Maximum Attestation Duration policy. Set to a blank value to clear the attestation.