Azure Compliance ControlsMicrosoft Defender for Cloud
Azure subscriptions should have Microsoft Defender for Azure Cosmos DB enabled
Microsoft Defender for Azure Cosmos DB is an Azure-native layer of security that detects attempts to exploit databases in your Azure Cosmos DB accounts. It detects potential SQL injections, known bad actors, and suspicious access patterns.
What this control checks
Defender for Azure Cosmos DB (CosmosDbs plan) is set to On, using the Standard pricing tier.
Framework mappings
The clauses this control is mapped to in each framework.
- CC6.8: The entity implements controls to prevent or detect and act upon the introduction of unauthorized or malicious software to meet the entity's objectives.
- CC7.1: To meet its objectives, the entity uses detection and monitoring procedures to identify (1) changes to configurations that result in the introduction of new vulnerabilities, and (2) susceptibilities to newly discovered vulnerabilities.
- A.5.25 Assessment and decision on information security events
- A.5.28 Collection of evidence
- A.8.7 Protection against malware
- A.8.9 Configuration management
- 3 Incident handling
- 6 Security in network and information systems acquisition, development and maintenance
- 9.1.7.1 Ensure That Microsoft Defender for Azure Cosmos DB Is Set To 'On'
- 8.1.7.1 Ensure That Microsoft Defender for Azure Cosmos DB Is Set To 'On'
RBI Cyber Security Framework for UCBs
- Annex I (6)
- OPS-04.01B Policies and instructions with specifications for protection against malware are documented, communicated, and provided in accordance with SP-01 with respect to the following aspects: - Use of system-specific protection mechanisms;- Operating protection programmes on system components...
- 2.1.9 Ensure That Microsoft Defender for Cosmos DB Is Set To 'On'
- 2.1.3 Ensure That Microsoft Defender for Databases Is Set To 'On'
- 2.1.9 Ensure That Microsoft Defender for Azure Cosmos DB Is Set To 'On'
- 2.1.6 Ensure That Microsoft Defender for Azure Cosmos DB Is Set To 'On'
- 3.1.7.1 Ensure That Microsoft Defender for Azure Cosmos DB Is Set To 'On'
- 164.308(a)(1)(ii)(A) Risk analysis
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
securitycenter_azure_defender_on_for_cosmosdb - Powerpipe Control:
azure_compliance.control.securitycenter_azure_defender_on_for_cosmosdb - Prowler Checks:
defender_ensure_defender_for_cosmosdb_is_on,defender_ensure_defender_for_databases_is_on - Azure Policy Definitions:
82bf5b87-728b-4a74-ba4d-6123845cf542,adbe85b5-83e6-4350-ab58-bf3a4f736e5e
Last reviewed: 2026-10-14