Policy Settings
The Azure CIS v2.0.0 - Section 2 - Microsoft Defender policy pack has 3 policy settings:
| Policy | Setting | Note |
|---|---|---|
| Azure > Security Center > Security Center > Auto Provisioning | Check: Enabled | Azure CIS v2.0.0 - Control: 2.1.15 |
| Azure > Security Center > Security Center > Defender Plan | Check: Defender Plan Enabled | Azure CIS v2.0.0 - Controls: 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.1.6, 2.1.7, 2.1.8, 2.1.9, 2.1.10, 2.1.11 and 2.1.12 |
| Azure > Security Center > Security Center > Defender Plan > Resource Type | - "Servers" - "App Service" - "Azure SQL Databases" - "Cloud Posture" - "Container registries" - "Containers" - "Cosmos DB" - "DNS" - "Key Vault" - "Kubernetes" - "Open-source relational databases" - "Resource Manager" - "SQL servers on machines" - "Storage" | Azure CIS v2.0.0 - Controls: 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.1.6, 2.1.7, 2.1.8, 2.1.9, 2.1.10, 2.1.11 and 2.1.12 |