Describing security baselines for Azure

Microsoft Defender for Cloud provides you with in-depth features for a CSPM for your Azure, hybrid, and multi-cloud infrastructure. You may be wondering how Microsoft determines and provides the information to your subscription for recommendations for improvement within the secure score. This is accomplished through the security baselines for Azure. When your Azure and Microsoft Defender for Cloud subscription is created, the security baseline for Azure is enabled through the Azure Security Benchmark. This is used to assess your infrastructure against Microsoft and its partners' best practices.

The Azure Security Benchmark has the following components and features:

• Azure ID: The Azure Security Benchmark ID that corresponds to the recommendation.
• Guidance: The rationale for the recommendation and links to guidance on how to implement it.
• Microsoft Defender for Cloud monitoring: Does Microsoft Defender for Cloud monitor...