Microsoft cloud security benchmark documentation

Learn how to secure your cloud solutions with our best practices and guidance. MCSB v2 is currently in preview.

About the Microsoft cloud security benchmark (MCSB)

Overview

• Microsoft cloud security benchmark introduction
• Overview of MCSB v2 controls (preview)
• Overview of MCSB v1 controls
• Overview of the MCSB security baselines (v1)

MCSB v2 controls (preview)

Overview

• Network security
• Identity management
• Privileged access
• Data protection
• Asset management
• Logging and threat detection

MCSB v2 controls (preview) continued

Overview

• Incident response
• Posture and vulnerability management
• Endpoint security
• Backup and recovery
• DevOps security
• Artificial intelligence security

More security resources

Training

• Microsoft Security documentation
• Azure Security Fundamentals
• Microsoft Defender for Cloud
• Zero Trust guidance
• Security adoption framework

AI + Machine Learning security baselines (v1)

Overview

• Azure Databricks (v1)
• Azure Machine Learning (v1)
• Azure Cognitive Search (v1)
• Azure OpenAI (v1)
• Microsoft Foundry (v1)

Analytics security baselines (v1)

Overview

• Azure Data Explorer (v1)
• Azure Data Factory (v1)
• Data Lake Analytics (v1)
• Event Hubs (v1)
• HDInsight (v1)
• Stream Analytics (v1)
• Azure Synapse Analytics (v1)

Compute security baselines (v1)

Overview

• Azure Functions (v1)
• Batch (v1)
• Container Instances (v1)
• Container Registry (v1)
• Azure Kubernetes Service (v1)
• Azure Storage (v1)
• Virtual Machine Scale Sets (v1)
• Virtual Machines Linux (v1)
• Virtual Machines Windows (v1)

Databases security baselines (v1)

Overview

• Azure Cache for Redis (v1)
• Azure Database for MySQL (v1)
• Azure Database for MariaDB (v1)
• Azure Database for PostgreSQL (v1)
• Azure SQL Database (v1)
• Azure Cosmos DB (v1)

Integration and Management baselines (v1)

Overview

• API Management (v1)
• Event Grid (v1)
• Logic Apps (v1)
• Service Bus (v1)
• Automation (v1)
• Azure Backup (v1)
• Azure Monitor (v1)
• Azure Policy (v1)

Networking security baselines (v1)

Overview

• Application Gateway (v1)
• Azure DNS (v1)
• Azure Firewall (v1)
• Azure Private Link (v1)
• Azure Public IP (v1)
• Azure DDoS Protection (v1)
• ExpressRoute (v1)
• Network Watcher (v1)

Security and additional baselines (v1)

Overview

• Microsoft Sentinel (v1)
• Customer Lockbox (v1)
• Key Vault (v1)
• Microsoft Defender for Cloud (v1)
• Azure Data Box (v1)
• Azure IoT Hub (v1)
• Azure App Service (v1)
• Azure Virtual Desktop (v1)