An ISO control shows red on the canal Defender for Cloud regulatory…

Question

An ISO control shows red on the canal Defender for Cloud regulatory dashboard. What should the engineer do next?

Accepted Answer

Drill into the failed resources and recommendations for that control and remediate or exempt as appropriate. — Red on the compliance board means failed resources, not “go invent a Sentinel hunt.” Drill into that control, fix or exempt what is listed, and leave the standard in place while you work.

Answer

Write a new Microsoft Sentinel KQL analytics rule named after the ISO control ID.

Answer

Delete the ISO standard from the tenant so the dashboard turns green.

Answer

Assign Owner on every failed resource so operators can hide the assessment manually.

An ISO control shows red on the canal Defender for Cloud regulatory dashboard. What should the engineer do next?

Short Explanation

Full Explanation