ASC Default policy settings should not have any setting set to 'Disabled'

None of the settings offered by ASC Default policy should be set to effect "Disabled". The powerpipe check is titled "Ensure any of the ASC Default policy setting is not set to "Disabled"".

What this control checks

Fails if any ASC Default policy setting is set to Disabled

Audit evidence

Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.securitycenter_asc_default_setting_not_disabled.

Framework-specific interpretation

CIS Azure Benchmark v1.3.0: Mapped to 2.12 (Ensure any of the ASC Default policy setting is not set to \"Disabled\").

CIS Azure Benchmark v1.4.0: Mapped to 2.12 (Ensure Any of the ASC Default Policy Setting is Not Set to 'Disabled').

CIS Azure Benchmark v1.5.0: Mapped to 2.6 (Ensure Any of the ASC Default Policy Settings are Not Set to 'Disabled').

CIS Azure Benchmark v2.0.0: Mapped to 2.1.14 (Ensure Any of the ASC Default Policy Settings are Not Set to 'Disabled').

Framework mappings

The clauses this control is mapped to in each framework.

CIS Azure Benchmark v1.3.0

2.12 Ensure any of the ASC Default policy setting is not set to \"Disabled\"

CIS Azure Benchmark v1.4.0

2.12 Ensure Any of the ASC Default Policy Setting is Not Set to 'Disabled'

CIS Azure Benchmark v1.5.0

2.6 Ensure Any of the ASC Default Policy Settings are Not Set to 'Disabled'

CIS Azure Benchmark v2.0.0

2.1.14 Ensure Any of the ASC Default Policy Settings are Not Set to 'Disabled'

Tool mappings

Use these identifiers to cross-reference this control across tools, reports, and evidence.

Compliance.tf Control: securitycenter_asc_default_setting_not_disabled
Powerpipe Control: azure_compliance.control.securitycenter_asc_default_setting_not_disabled

Last reviewed: 2026-10-14

View all Azure controls →