Microsoft cloud security benchmark documentation

Learn how to secure your cloud solutions with our best practices and guidance.

About the Microsoft cloud security benchmark (MCSB)

Overview

• Microsoft cloud security benchmark introduction
• Overview of MCSB controls (v1)
• Overview of the MCSB security baselines

MCSB v1 controls

Overview

• Network security
• Identity management
• Privileged access
• Data protection
• Asset management
• See more

More Azure security resources

Training

• Azure Security Fundamentals
• Shared responsibility in the cloud
• Microsoft Defender for Cloud
• Azure Security Benchmark Foundation blueprint sample

AI + Machine Learning security baselines

Overview

• Azure Databricks
• Azure Machine Learnings
• Azure Cognitive Search

Analytics security baselines

Overview

• Azure Data Explorer security baseline
• Azure Data Factory security baseline
• Data Lake Analytics security baseline
• Event Hubs security baseline
• HDInsight security baseline
• Stream Analytics baseline
• Azure Synapse Analytics security baseline

Compute security baselines

Overview

• Azure Functions
• Batch
• Container Instances
• Container Registry
• Service Fabric
• Azure Storage
• Virtual Machine Scale Sets
• Virtual Machines Linux
• Virtual Machines Windows

Databases security baselines

Overview

• Azure Cache for Redis
• Azure Database for MySQL
• Azure Database for MariaDB
• Azure Database for PostgreSQL - Single Server
• Azure Database for PostgreSQL - Hyperscale
• Azure SQL Database
• Cosmos DB

Integration security baselines

Overview

• API Management
• Event Grid
• Logic Apps

Management and Governance security baselines

Overview

• Automation
• Azure Backup
• Azure Monitor
• Azure Policy
• Azure Resource Graph

Networking security baselines

Overview

• Application Gateway
• Azure DNS
• Azure Firewall
• Azure Private Link
• Azure Public IP
• DDOS Protection
• ExpressRoute
• Network Watcher

Security service baselines

Overview

• Microsoft Sentinel
• Customer Lockbox
• Key Vault
• Microsoft Defender for Cloud

Additional security baselines

Overview

• Azure Data Box
• Azure DevTest Labs
• Azure IoT Hub