CIS Foundations Benchmark Checks for Microsoft Azure

Alert Logic® Managed Detection and Response is certified by the Center of Internet Security (CIS) for the Microsoft Azure Foundations Benchmark. The CIS Microsoft Azure Foundations Benchmark is a set of guidelines that help you to secure your Azure environment by providing step-by-step implementation and assessment procedures from industry security experts that go beyond high-level security guidance. 

CIS is a globally recognized security organization with a mission to identify, develop, validate, promote, and sustain best practice solutions for cyber defense. In this article, learn about assessing your Azure environment against the Benchmark.

In This Article

• Configuration Checks
• Remediation Guidance
• CIS Microsoft Azure Benchmarks Report
• RBAC Requirements

Configuration Checks

Configuration checks that support both Level 1 and Level 2 of the CIS Microsoft Azure Foundations Benchmark include, but are not limited to:

• Identity and Access Management
• Logging and Monitoring
• Networking

Remediation Guidance

Remediations and exposures based on the CIS Microsoft Azure Foundations Benchmark are available on the Exposures page in the Alert Logic console at (navigation menu) > Respond > Exposures and can be managed in the same way as other remediations and exposures. These remediations and exposures provide step-by-step remediation guidance for the Azure Console and command line interface to resolve configuration settings that do not meet the Foundations Benchmark.

CIS Microsoft Azure Benchmarks Report

The CIS Microsoft Azure Benchmarks Report identifies your Azure resources and whether they are compliant or non-compliant for each new configuration check. This report can be found in the Alert Logic console at > Validate > Reports > Compliance > CIS Microsoft Azure Benchmarks.

For more information about this report, refer to our CIS Microsoft Azure Foundation Benchmark documentation.

RBAC Requirements

You may be required to update your role-based access control (RBAC) document in order to assess your account against the above described configuration checks. If you have existing Azure deployments or you already have an app registration set up, refer to our Update your Azure Deployment for CIS Foundation Benchmarks documentation to allow Alert Logic to perform CIS Benchmark checks on your deployments.