Azure Defender for cloud Settings | Security policies

Bimala Shrestha 25

Guideline to create Azure Defender for cloud Settings | Security policies

SUNOJ KUMAR YELURU 14,881 Reputation points MVP

2024-11-28T10:56:45.22+00:00

Hi @Bimala Shrestha , To follow-up, Please let us know if you have further query on this and don’t forget to Accept the answer
Rahul Podila 1,070 Reputation points Microsoft Vendor

2024-12-10T06:09:13.8433333+00:00

Hi @Bimala Shrestha
Just checking in to see if the below answer provided by @SUNOJ KUMAR YELURU helped.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know

Accepted answer

SUNOJ KUMAR YELURU 14,881 Reputation points MVP

2024-11-27T10:05:31.75+00:00
Hello @Bimala Shrestha

Thanks for using Q&A forum.

Built-in initiatives that are monitored by Defender for Cloud Azure Policy built-in policy definitions related to Microsoft Defender for Cloud. The following groupings of policy definitions are available:

The initiatives group lists the Azure Policy initiative definitions in the "Defender for Cloud" category.

The default initiative group lists all the Azure Policy definitions that are part of Defender for Cloud's default initiative, Microsoft cloud security benchmark. This Microsoft-authored, widely respected benchmark builds on controls from the Center for Internet Security (CIS) and the National Institute of Standards and Technology (NIST) with a focus on cloud-centric security.

The category group lists all the Azure Policy definitions in the "Defender for Cloud" category.

Security standards in Defender for Cloud:

Modify the built-in MCSB for the subscription: When you enable Defender for Cloud, the MCSB is automatically assigned to all Defender for Cloud registered subscriptions. Learn more about managing the MCSB standard.

Add regulatory compliance standards: If you have one or more paid plans enabled, you can assign built-in compliance standards against which to assess your Azure, AWS, and GCP resources. Learn more about assigning regulatory standards.

Add custom standards: If you have at least one paid Defender plan enabled, you can define new custom standards and custom recommendations in the Defender for Cloud portal. You can then add recommendations to those standards.

If the Answer is helpful, please click Accept Answer and Up-Vote, so that it can help others in the community looking for help on similar topics.
Please sign in to rate this answer.

1 person found this answer helpful.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

1 additional answer

Abiola Akinbade 21,460 Reputation points

2024-11-27T08:03:14.38+00:00

You can see the guidelines here:

https://learn.microsoft.com/en-us/azure/defender-for-cloud/create-custom-recommendations

You can mark it 'Accept Answer' and 'Upvote' if this helped you

Regards,

Abiola
Please sign in to rate this answer.
Bimala Shrestha 25 Reputation points

2024-11-27T12:30:01.5566667+00:00

How to check the standard policy is working? Is there any report tracking?

Bimala Shrestha 25 Reputation points

2024-12-23T09:41:37.7733333+00:00

Still waiting for your reply on "How to check the standard policy is working? Is there any report tracking?"

Rahul Podila 1,070 Reputation points Microsoft Vendor

2024-12-24T01:25:39.6933333+00:00

Hi @Bimala Shrestha

Go to the Azure Portal and open Azure Defender for Cloud.

In the Security Policy section, you’ll be able to see if your resources are Compliant (following the policies) or Non-compliant (not following the policies).

In the Recommendations section, Azure Defender for Cloud will show any areas where your resources are not compliant with the policies and tell you what needs to be fixed.

You can check the Activity Log in Azure Security Center to track actions related to your security policies and see if there were any changes or issues.

Security Benchmark reports in Azure Defender for Cloud give you an overview of how well your environment is following security best practices. You can also schedule these reports to be automatically sent to you, keeping you updated on your compliance status.

By using these tools, you'll be able to track the performance of your security policies and address any issues.

Bimala Shrestha 25 Reputation points

2024-12-26T07:20:24.46+00:00

@Rahul Podila thanks

Bimala Shrestha 25 Reputation points

2025-01-07T07:42:25.5166667+00:00

@Rahul Podila How to check https://learn.microsoft.com/en-us/azure/defender-for-cloud/create-custom-recommendations created policy. **Security Policy/**Security posture shows the existing policy compliance.

Rahul Podila 1,070 Reputation points Microsoft Vendor

2025-01-08T01:50:52.36+00:00

Hi @Bimala Shrestha

To test that your custom policy is working correctly in Azure Defender for Cloud, first make sure that your custom policy is created in Azure Policy and applied to the right resources (such as your subscription or resource group).

Now, go to Defender for Cloud and find the Security posture section. This will give you a sense of how strong your product is and whether it follows your default settings. You will check for consistency or mismatch (if something does not follow the rules).

Next, go to the Recommendations section of Defender for Cloud. If there is a discrepancy, it appears here with details of what needs to be fixed. If you encounter any inconsistencies, click on the suggestion to take specific steps to resolve the issue.

If the configuration does not behave as expected, you can go back to the Azure configuration and make changes to ensure it targets the right resources and configures them correctly.

After making any changes, check Defender for Cloud to verify that the issues have been resolved and that your products are now compliant.

This approach will help ensure that your products remain secure in compliance with your intended schedule.

If you have any further queries, do let us know.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Azure Defender for cloud Settings | Security policies

1 additional answer

Your answer