Azure Compliance ControlsAzure SQL Database
SQL servers should have vulnerability assessment enabled
Audit Azure SQL servers which do not have recurring vulnerability assessment scans enabled. Vulnerability assessment can discover, track, and help you remediate potential database vulnerabilities.
What this control checks
Whether SQL servers have vulnerability assessment turned on
Framework mappings
The clauses this control is mapped to in each framework.
- 5 Supply chain security
- 6 Security in network and information systems acquisition, development and maintenance
- RA-5 Vulnerability Monitoring and Scanning
- 3.11.2 Scan for vulnerabilities in organizational systems and applications periodically and when new vulnerabilities affecting those systems and applications are identified
- 3.11.3 Remediate vulnerabilities in accordance with risk assessments
RBI Cyber Security Framework for UCBs
- Annex I (12)
- 1 IT Governance
- 3.3 Vulnerability Management
- 4.2.2 Ensure that Vulnerability Assessment (VA) is enabled on a SQL server by setting a Storage Account
- 4.2.2 Ensure that Vulnerability Assessment (VA) is enabled on a SQL server by setting a Storage Account
- 4.2.2 Ensure that Vulnerability Assessment (VA) is enabled on a SQL server by setting a Storage Account
- 4.2.2 Ensure that Vulnerability Assessment (VA) is enabled on a SQL server by setting a Storage Account
- RA-5 Vulnerability Scanning
- 0709.10m1Organizational.1-10.m 10.06 Technical Vulnerability Management
- 164.308(a)(8) Evaluation
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
sql_server_and_databases_va_enabled - Checkov Checks:
CKV2_AZURE_2,CKV2_AZURE_3 - Powerpipe Controls:
azure_compliance.control.sql_server_and_databases_va_enabled,azure_compliance.control.sql_server_va_setting_periodic_scan_enabled - Prowler Check:
sqlserver_vulnerability_assessment_enabled
Last reviewed: 2026-10-15