Custom policies and (regulatory) compliance

Besides Azure Security Benchmark as the default security policy in Defender for Cloud, you can add custom policies for getting custom recommendations in addition to the built-in recommendations. Custom recommendations will appear in the Custom recommendations security control, which does not count toward the secure score.

Figure 7.24 – Custom recommendations in Defender for Cloud

To add custom recommendations to Defender for Cloud, you need to create a custom policy initiative that contains all custom policy definitions:

1. In Azure Policy, navigate to Definitions and select + Initiative definition.
2. Select the highest scope for creating your initiative so you can later assign it to whatever scope you need. Then, enter a name and select a category.

Figure 7.25 – Creating a custom initiative

3. In the Policies tab, click Add policy definition(s) to add your custom...