Azure subscriptions should have Microsoft Defender for Databases enabled

SOC 2

• CC6.8: The entity implements controls to prevent or detect and act upon the introduction of unauthorized or malicious software to meet the entity's objectives.
• CC7.1: To meet its objectives, the entity uses detection and monitoring procedures to identify (1) changes to configurations that result in the introduction of new vulnerabilities, and (2) susceptibilities to newly discovered vulnerabilities.

ISO/IEC 27001:2022

• A.5.25 Assessment and decision on information security events
• A.5.28 Collection of evidence
• A.8.7 Protection against malware
• A.8.9 Configuration management

NIS2 Directive (EU 2022/2555)

• 3 Incident handling
• 6 Security in network and information systems acquisition, development and maintenance

NIST SP 800-171 Rev 2

• 3.3.1: Create and retain system audit logs and records to the extent needed to enable the monitoring, analysis, investigation, and reporting of unlawful or unauthorized system activity
• 3.3.2 Ensure that the actions of individual system users can be uniquely traced to those users, so they can be held accountable for their actions

RBI Cyber Security Framework for UCBs

• Annex I (6)

BSI C5:2025

• OPS-04.01B Policies and instructions with specifications for protection against malware are documented, communicated, and provided in accordance with SP-01 with respect to the following aspects: - Use of system-specific protection mechanisms;- Operating protection programmes on system components...

CIS Azure Benchmark v1.5.0

• 2.1.3 Ensure That Microsoft Defender for Databases Is Set To 'On'

CIS Azure Benchmark v2.0.0

• 2.1.3 Ensure That Microsoft Defender for Databases Is Set To 'On'