When it comes to compliance,
we've learned over time that compliance has become a really big deal.
From a security standpoint, many industries release standards,
regulations,
and benchmarks that a lot of organizations link their security posture too.
Within Microsoft Defender for Cloud,
there is a module that is specifically dedicated to regulatory compliance.
Essentially,
what it does is it shows you your compliance data mapped as assets in
your dashboard in relation to what you have configured.
When you navigate to the dashboard, you have the ability to download the report,
manage your compliance policies, query the data within the report,
look at your compliance over time in a workbook format,
and you can run some audit reports.
The dashboard will also provide you with a Benchmark score.
Now currently,
I'm only applying the Azure Security Benchmark to my Azure subscription,
hence,
we can only see the controls that's related to the Azure
Security Benchmark in relation to my data.
Now as I scroll down, I can expand the compliance controls.
You'll see that there are a number of different compliance controls.
And as I expand these controls,
you can see what each control contains and what exactly it's looking for.
So let's expand one of these controls.
I'm going to look at the Network Security control.
Right now, in relation to my data,
there is one control that I do not have enabled.
This is the one that relates to deploying a firewall at
the edge of an enterprise network.
Now when I expand this, I can see exactly which assets of Azure are affected.
For example, my virtual network should be protected by an Azure Firewall.
When I click on this specific control, it'll open up a window,
which will give me information about the control itself.
This control relates to virtual networks that should
be protected by an Azure Firewall.
It also goes and gives me which tactic mapped to the MITRE ATT&CK
framework that this control would mitigate.
As I expand the description, I can see what the description is about the control.
And taking a look at the Remediation steps,
it will give me the actions that I need to perform in
order to remediate this finding.
I can also see the Affected resources.
And if I select the Affected resource, I can trigger a logic app,
which will go ahead and perform actions that I predefined for the app.
I can exempt the finding,
or I can also assign this finding to somebody that would need to mitigate it.
Let's now get back and take a look at another control.
I'm going to look at the one for Endpoint Security, and we can see one finding,
which says Use modern‑anti malware software.
As I expand this,
it shows me that some of my resources do not have
any endpoint protection installed,
or they're lacking configuration in relation to
aspects of the endpoint protection.
So for example,
if we take a look at the one that's related to Windows Defender Exploit Guard,
this again shows me information about the finding.
It gives me the related recommendation,
and this will direct me to the security
recommendation section of Defender for Cloud,
and it also shows me the rest of the options like the Remediation steps,
Affected resources, and so forth.
Now as I navigate back to the Regulatory compliance dashboard,
what if I wanted to add additional compliance standards?
That can be done easily by clicking on Manage compliance policies.
And expanding my environment, I will select my subscription.
And under Security policy,
I have the option to enable additional industry and regulatory standards.
So right now, I have the Azure Security Benchmark,
I'll go ahead and enable the PCI DSS, and we'll do the same for the SOC TSP.
And if I wanted to add even more standards,
I could click on the Add more standards button,
and this will give me a list of all of the
standards that is currently supported.
So from here,
I could actually go ahead and add some additional compliance standards.
So as I navigate back to the dashboard,
you can see that the value that the dashboard gives you is
astronomical in relation to securing your environment.
Not only does it provide you with information to
secure your overall Azure estate,
but you can also leverage this to ensure that you are actually protecting your server environment in line with industry standards.