Checklist Summary:

This document, CIS Microsoft Azure Foundations Benchmark, provides prescriptive guidance for establishing a secure baseline configuration for Microsoft Azure. This Benchmark is scoped to establish foundational security for tenancy in the Microsoft Azure cloud services platform. For Cloud Service Providers, the "Foundations" Benchmark is meant to be used as a first step which is complimented by "Service Category" Benchmarks as a second step. This relationship is further explained in the "Introduction" section. Section overviews are used extensively in this document to provide specific and very important context - review section overviews diligently. The sections of this document are titled to reflect the product category names found in the Microsoft Azure Product Directory. These categorical sections are then divided into subsections that will be titled to reflect the specific services being addressed. Recommendations will be found in these subsections if "Foundational" recommendations are available for the service, OR if a Service Category Benchmark has not yet been created to address the Service Category. To obtain the latest version of this guide, please visit https://benchmarks.cisecurity.org. If you have questions, comments, or have identified ways to improve this guide, please write us at BenchmarkInfo@cisecurity.org.

Checklist Role:

• Active Directory Server
• Antivirus Software
• Application Server
• Border and Gateway Router
• Business Productivity Application
• Client / Server
• Database Server
• Enterprise Firewall
• Enterprise Router
• Router
• Server
• Virtualization Server
• Web Application Server
• Web Server

Known Issues:

Not provided.

Target Audience:

This document is intended for system and application administrators, security specialists, auditors, help desk, and platform deployment personnel who plan to develop, deploy, assess, or secure solutions that incorporate Microsoft Azure.

Target Operational Environment:

• Managed

Testing Information:

Not provided.

Regulatory Compliance:

Not provided.

Comments/Warnings/Miscellaneous:

Not provided.

Disclaimer:

https://www.cisecurity.org/cis-securesuite/cis-securesuite-membership-terms-of-use/

Product Support:

https://www.cisecurity.org/support

Point of Contact:

benchmarkinfo@cisecurity.org

Sponsor:

Not provided.

Licensing:

https://www.cisecurity.org/cis-securesuite/cis-securesuite-membership-terms-of-use/

Change History:

Created New Checklist - 03/24/2025

Dependency/Requirements:

URL	Description

References:

Reference URL	Description

NIST checklist record last modified on 03/24/2025