Azure subscriptions should have Network Watcher enabled

Network Watcher is a regional service to monitor and diagnose conditions at a network scenario level in, to, and from Azure. A network watcher resource group is required in every region where a virtual network is present.

What this control checks

Azure subscriptions must have Network Watcher enabled

Framework mappings

The clauses this control is mapped to in each framework.

ISO/IEC 27001:2022

A.8.20 Network security
A.8.21 Security of network services
A.8.22 Segregation of networks

NIS2 Directive (EU 2022/2555)

2 Risk management policy
6 Security in network and information systems acquisition, development and maintenance
11 Access control

NIST SP 800-53 Rev 5

AU-6 Audit Record Review, Analysis, and Reporting
AU-6(4) Central Review And Analysis
AU-6(5) Central Review And Analysis
AU-12 Audit Record Generation
AU-12(1) System-Wide And Time-Correlated Audit Trial

1 more clause

SI-4: System Monitoring

NIST Cybersecurity Framework v2.0

ID.AM-03
ID.RA-03: Internal and external threats to the organization are identified and recorded.
ID.RA-05
PR.IR-01

NIST SP 800-171 Rev 2

3.3.1: Create and retain system audit logs and records to the extent needed to enable the monitoring, analysis, investigation, and reporting of unlawful or unauthorized system activity
3.3.2 Ensure that the actions of individual system users can be uniquely traced to those users, so they can be held accountable for their actions
3.14.6 Monitor organizational systems, including inbound and outbound communications traffic, to detect attacks and indicators of potential attacks
3.14.7: Identify unauthorized use of organizational systems.

CIS Azure Benchmark v4.0.0