| Source | Azure Portal | ||
| Display name | Microsoft Managed Control 1548 - Vulnerability Scanning | ||
| Id | 3afe6c78-6124-4d95-b85c-eb8c0c9539cb | ||
| Version | 1.0.0 Details on versioning |
||
| Category | Regulatory Compliance Microsoft Learn |
||
| Description | Microsoft implements this Risk Assessment control | ||
| Additional metadata |
Name/Id: ACF1548 / Microsoft Managed Control 1548 Category: Risk Assessment Title: Vulnerability Scanning - Analyze Scan Reports And Assessment Results Ownership: Customer, Microsoft Description: The organization: Analyzes vulnerability scan reports and results from security control assessments; Requirements: The Vulnerability Management team assesses the vulnerability severity and impact level based on documented technology deployed and used in the Azure environment. C+AI VSA collects information from a variety of vulnerability scanning tools to help determine the inventory of applications installed on servers to assess the current threat surface. Configuration checks are performed against the C+AI VSA managed Azure baselines. The C+AI Security team reviews configurations as part of the vulnerability scanning tool reports and performs a risk analysis in determining scores for impact and likelihood. Specific steps in the vulnerability process include: * Review mitigating controls that may affect the vulnerability rating such as implementation of firewalls, antivirus software, access control lists (ACLs), and more. * Review the Asset Value for the affected assets. * Determine the timeframe for the application of the required updates. |
||
| Mode | Indexed | ||
| Type | Static | ||
| Preview | False | ||
| Deprecated | False | ||
| Effect | Fixed audit |
||
| RBAC role(s) | none | ||
| Rule aliases | none | ||
| Rule resource types | IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups |
||
| Compliance | Not a Compliance control | ||
| Initiatives usage | none | ||
| History | none | ||
| JSON compare | n/a | ||
| JSON |
|