Azure Compliance ControlsMicrosoft Entra ID
Microsoft Entra ID tenants should have 'security defaults' enabled
Security defaults in Microsoft Entra ID make it easier to be secure and help protect your organization. This control validates the `security defaults` setting for the Microsoft Entra ID tenant, which is the policy that this check targets.
What this control checks
Checks the tenant's security defaults setting in Microsoft Entra ID
Framework mappings
The clauses this control is mapped to in each framework.
- A.5.15 Access control
- 2 Risk management policy
- 3 Incident handling
- 6.1.1 Ensure that 'security defaults' is enabled in Microsoft Entra ID
- 5.1.1 Ensure that 'security defaults' is enabled in Microsoft Entra ID
RBI Cyber Security Framework for UCBs
- Annex I (7.2)
- 1.1.1 Ensure Security Defaults is enabled on Azure Active Directory
- 1.1.1 Ensure Security Defaults is enabled on Microsoft Entra ID
- 2.1.1 Ensure Security Defaults is enabled on Microsoft Entra ID
- 164.312(d) Person or entity authentication
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
ad_security_defaults_policy_enabled - Powerpipe Control:
azure_compliance.control.ad_security_defaults_policy_enabled - Prowler Check:
entra_security_defaults_enabled
Last reviewed: 2026-10-09