The canal authority has house rules such as no public IPs on lock-l…

Question

The canal authority has house rules such as no public IPs on lock-lab resource groups and Key Vault purge protection. How should those appear as a Defender for Cloud standard?

Accepted Answer

Create a custom standard in Defender for Cloud from an Azure Policy initiative (or custom assessments as official docs describe). — House rules need a real standard, not a Threat Modeling doodle. Build a custom Defender for Cloud standard from your Azure Policy initiative and let the dashboard grade the canal’s own rules.

Answer

Draw the house rules only in the Microsoft Threat Modeling Tool and attach screenshots to Secure Score.

Answer

Publish the house rules as a Microsoft Sentinel hunting bookmark collection.

Answer

Replace MCSB with a Word document stored in a storage account public container.

The canal authority has house rules such as no public IPs on lock-lab resource groups and Key Vault purge protection. How should those appear as a Defender for Cloud standard?

Short Explanation

Full Explanation