GRCLibrary.ai

Standard

Azure Cloud Hardening Baseline Standard

This standard defines the hardening baseline for Microsoft Azure environments operated by or on behalf of the organization. It expresses outcomes and control intent in vendor-neutral language and references Azure service classes by their generic role rather than reproducing vendor configuration guidance verbatim.

Type
Standard
Version
0.0.9
Date
2026-07-06
Owner
Chief Information Security Officer
Approving authority
Governance Library Maintainer
Classification
Public
Confidentiality
Public
Category
Developer Security
Review frequency
Annual and upon material change to the cloud provider service catalogue, baseline benchmark releases, or organizational use of new service classes
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • 1. Purpose
  • 2. Scope
  • 3. Baseline alignment
  • 4. Tenant, subscription, and identity
  • 5. Detective controls and logging
  • 6. Preventive controls
  • 7. Network
  • 8. Data protection
  • 9. Compute
  • 10. Storage
  • 11. Secrets and credentials
  • 12. Monitoring, detection, and response
  • 13. Supplementary services
  • 14. Tagging and inventory
  • 15. Provisioning and change
  • 16. Incident readiness
  • 17. Operating expectations
  • 18. Framework alignment
  • 19. Limitations

Frameworks it maps to

Related documents