Checklist Summary:

This document, CIS Microsoft Azure Foundations Benchmark, provides prescriptive guidance for establishing a secure baseline configuration for Microsoft Azure. The scope of this benchmark is to establish the foundation level of security for anyone adopting Microsoft Azure cloud services. The benchmark is, however, not an exhaustive list of all possible security configurations and architecture. The benchmark should be understood as a starting point. Site-specific tailoring will almost certainly be required. The CIS Azure Foundations Benchmark provides recommendations for a variety of Microsoft Azure Services including the following: • Microsoft Entra ID (Azure Active Directory) • Microsoft Defender for Cloud • Microsoft Azure App Service • Microsoft Azure Database Services • Microsoft Azure Storage Accounts • Microsoft Azure Monitor • Microsoft Azure Networking • Microsoft Azure Virtual Machines To obtain the latest version of this guide, please visit https://benchmarks.cisecurity.org. If you have questions, comments, or have identified ways to improve this guide, please write us at benchmarkinfo@cisecurity.org.

Checklist Role:

• Active Directory Server
• Antivirus Software
• Application Server
• Border and Gateway Router
• Business Productivity Application
• Client / Server
• Database Server
• Enterprise Firewall
• Enterprise Router
• Router
• Server
• Virtualization Server
• Web Application Server
• Web Server

Known Issues:

Not provided.

Target Audience:

This document is intended for system and application administrators, security specialists, auditors, help desk, and platform deployment personnel who plan to develop, deploy, assess, or secure solutions that incorporate Microsoft Azure.

Target Operational Environment:

• Managed

Testing Information:

Not provided.

Regulatory Compliance:

Not provided.

Comments/Warnings/Miscellaneous:

Not provided.

Disclaimer:

https://www.cisecurity.org/cis-securesuite/cis-securesuite-membership-terms-of-use/

Product Support:

https://www.cisecurity.org/support

Point of Contact:

benchmarkinfo@cisecurity.org

Sponsor:

Not provided.

Licensing:

https://www.cisecurity.org/cis-securesuite/cis-securesuite-membership-terms-of-use/

Change History:

Approved and status changed to Candidate - 09/09/2024
Made Checklist Visible - 09/10/2024
SHA Updated - 10/01/2024
Candidacy Period Complete. Status Changed to Final - 11/04/2024

Dependency/Requirements:

URL	Description

References:

Reference URL	Description
https://workbench.cisecurity.org/communities/72	CIS Microsoft Azure Community - This community is where the Azure Foundations Benchmark is written and maintained. All new recommendations and change requests should be directed to this community.

NIST checklist record last modified on 11/04/2024