Azure Compliance ControlsMicrosoft Defender for Cloud
Azure subscriptions should have Microsoft Defender for open-source relational databases enabled
Turning on Microsoft Defender for Open-source relational databases enables threat detection for Open-source relational databases, providing threat intelligence, anomaly detection, and behavior analytics in the Microsoft Defender for Cloud.
What this control checks
Checks the Azure subscription's Defender plan setting for open-source relational databases
Framework mappings
The clauses this control is mapped to in each framework.
- CC6.8: The entity implements controls to prevent or detect and act upon the introduction of unauthorized or malicious software to meet the entity's objectives.
- CC7.1: To meet its objectives, the entity uses detection and monitoring procedures to identify (1) changes to configurations that result in the introduction of new vulnerabilities, and (2) susceptibilities to newly discovered vulnerabilities.
- A.5.25 Assessment and decision on information security events
- A.5.28 Collection of evidence
- A.8.7 Protection against malware
- A.8.9 Configuration management
- 3 Incident handling
- 6 Security in network and information systems acquisition, development and maintenance
NIST Cybersecurity Framework v2.0
- ID.RA-03: Internal and external threats to the organization are identified and recorded.
- 9.1.7.2 Ensure That Microsoft Defender for Open-Source Relational Databases Is Set To 'On'
- 8.1.7.2 Ensure That Microsoft Defender for Open-Source Relational Databases Is Set To 'On'
RBI Cyber Security Framework for UCBs
- Annex I (6)
- 3.1.f Maker-checker
- 3.1.g Trails
- OPS-04.01B Policies and instructions with specifications for protection against malware are documented, communicated, and provided in accordance with SP-01 with respect to the following aspects: - Use of system-specific protection mechanisms;- Operating protection programmes on system components...
- 2.1.6 Ensure That Microsoft Defender for Open-Source Relational Databases Is Set To 'On'
- 2.1.3 Ensure That Microsoft Defender for Databases Is Set To 'On'
- 2.1.6 Ensure That Microsoft Defender for Open-Source Relational Databases Is Set To 'On'
- 2.1.5 Ensure That Microsoft Defender for Open-Source Relational Databases Is Set To 'On'
- 3.1.7.2 Ensure That Microsoft Defender for Open-Source Relational Databases Is Set To 'On'
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
securitycenter_azure_defender_on_for_opensource_relational_db - Powerpipe Control:
azure_compliance.control.securitycenter_azure_defender_on_for_opensource_relational_db - Prowler Checks:
defender_ensure_defender_for_databases_is_on,defender_ensure_defender_for_os_relational_databases_is_on - Azure Policy Definitions:
0a9fbe0d-c5c4-4da8-87d8-f4fd77338835,44433aa3-7ec2-4002-93ea-65c65ff0310a
Last reviewed: 2026-10-15