CIS Microsoft Azure Foundations Benchmark v1.0.0 Now Available

It is with great enthusiasm we announce the release of the highly anticipated CIS Microsoft Azure Foundations Benchmark v1.0.0.  The development of this benchmark can be attributed to the collaborative efforts of our CIS Benchmark developers team, remarkable volunteers, and multiple vendors, all who have selflessly given their time and resources in developing this benchmark.

Interested in learning about the process that goes into developing all CIS Benchmarks? Check out our video below.

 

 

The CIS Microsoft Azure Foundations Benchmark v1.0.0 is intended to serve as a guide to secure the Azure Cloud. The Audit and Remediation sections within this Benchmark have been refined to include the Azure console steps and Azure CLI 2.0 commands where applicable. Microsoft has been an integral partner in the publishing of this benchmark to ensure recommendations in which no commands exist, will receive proper attention in future development. The structure of this benchmark is similar to that of other cloud-based CIS Benchmarks.

Arrow Download the CIS Microsoft Azure Foundations Benchmark

The CIS Microsoft Azure Foundations Benchmark v1.0.0 sections are as follows:

  • Identity and Access Management
  • Security Center
  • Storage Accounts
  • SQL Services
  • Logging and Monitoring
  • Networking
  • Virtual Machine
  • Other Security Considerations.

In the continuity of our mission, feedback provided by those entrenched in using and implementing our benchmarks provides us the opportunity for continuous improvement of our products. Feedback can be made visible to CIS by creating a discussion thread or ticket within the CIS Microsoft Azure Benchmark community. To become a part of the benchmark development process, please make note of this interest in the discussion thread or submit a ticket via our support portal. The creation, dissemination, and maintenance of CIS Benchmarks would not be made possible without the incredible volunteers and vendors that offer up their time and expertise.

Please allow us a moment to thank the following volunteers who made this benchmark possible:

Authors

  • Pravin Goyal, Cavirin Systems, Inc.
  • Prabhu Angadi, Security Content Author
  • Parag Patil

Contributors

  • Gururaj Pandurangi
  • Pravin Kulkarni
  • Ben Layer, Tripwire, Inc
  • Pierre Gronau
  • Felix Simmons
  • Jonathan Trull, Microsoft
  • Shamir Charania

Thank you all for the outstanding work and passion you put into this benchmark!

Stay tuned for future Cloud Benchmarks currently in development at CIS.