Managed Azure Security Compliance Services

What is Managed Azure Security Compliance Services?

Managed Azure Security Compliance Services has created a fast, complex, and dynamic environment that is difficult to secure. Traditional security measures are built for stable, full-stack controllable networks – not for rapidly changing cloud-based environments.

When using any service provided by a public cloud provider, such as Microsoft Azure, you need to understand the shared responsibility model for cloud computing. In an Infrastructure as a Service (IaaS) cloud service model, you are responsible for protecting your applications, operating system, network configuration, identity, clients, and data in Azure. Microsoft is responsible for platform security, such as physical security, host infrastructure, and protection of critical services.

What's included in the Managed Azure Security Compliance Services service:

Perform an initial assessment of existing infrastructure and identify critical components

Enable environment auditing according to one of the following regulatory standards: Azure CIS NIST SP 800-53 Rev4, PCI DSS 3.2, ISO 27001, and SOC TSP.

Create a custom security policy that uses only the high-value/low-risk items identified and agreed upon by the customer.

Provide ongoing monitoring and remediation (only if agreed to by the customer, for controls that have no impact on the availability of the environment) of policy violations

Provide monthly/weekly compliance status reports

Provide advanced alerting (integration with the customer's ticketing system) for policy violations

Create the best enterprise-level tested alerts for all essential Azure services used in a specific environment

Create a custom operating dashboard to monitor critical Azure components

The security controls available in Azure don't necessarily map 1:1 to the security controls defined in the actual security standards, and some of them aren't even made available for auditing by the Azure platform. Our services can audit and control only what security controls the Azure platform is making available through Azure Policies, with the exception of the Azure CIS standard, where we perform extensive custom development work to enable all the controls defined in the standard (over 100 vs only 48 available by default).

Managed Azure Security Compliance Services is one of the most comprehensive security standards we recommend for most of our customers is the CIS Security Benchmark Microsoft Azure Foundations. This standard was designed with Azure Security in mind for the Azure platform, and unless your business needs to use the more formal standards, such as ISO 27001, NIST 800-53, or PCI DSS, look no further. The standard has more than 108 security controls that must be audited, but at the moment (December 2019), only 48 of them are available by default in the internal Azure Policy policies. The remaining 60 controls need manual intervention: our extensive development work has given us the possibility to audit more than 100 standard security controls!

System Requirements:

CPU: 1.8 GHz dual core processor

RAM: 2 GB

HDD/SSD: 50 GB of free space on main drive

Operating system: Microsoft Windows 8 32-bit, Microsoft Windows 7 32-bit and Microsoft Windows Vista 32-bit

Resolution: 1024×768