NIST checklist

Question

Hi, we are trying to comply with NIST standard. Microfost Defender for Cloud offers NIST checklist. While I working through the list, I am quite confused.

• One of the failure item is 'Azure Defender for servers should be enabled' which is in regards to my subscription. When I checked my subscription, the overview page showed 'Azure Defender coverage 100% covered'. Any ideas?
• Also after I did changes in order to be compliant, is there a way to manually refresh the policy checklist results? Thanks

Answer 1

To trigger evaluation of Azure Policy (which how this checklist is implemented), refer to https://learn.microsoft.com/en-us/azure/governance/policy/how-to/get-compliance-data

Regarding the results, this appears to apply to Defender for Servers - refer to https://learn.microsoft.com/en-us/azure/defender-for-cloud/plan-defender-for-servers-select-plan

---

hth

Marcin

Answer 2

I have an error "Storage accounts should use private link" in the checklist, but I have disabled all public network access in my storage account (I don't really use this storage account, it was created automatically by my web app service for monitoring purpose?).
Does it mean I HAVE to create a private endpoint connection for this storage to be compliant?

Answer 3

Another error I couldn't figure out the solution: App Service apps should have resource logs enabled

I enabled the application log in my web app:

Answer 4

Follow the instructions if you want to fully comply with the standard.

---

hth

Marcin