Azure Compliance ControlsAzure SQL Database
SQL servers should have VA 'Periodic Recurring Scans' enabled
Azure SQL servers are evaluated for Vulnerability Assessment configuration. The check looks at whether periodic recurring scans are scheduled (e.g., weekly) for the server and its databases. Servers with scans not scheduled are identified.
What this control checks
Checks the periodic recurring scans setting for SQL server vulnerability assessment
Framework mappings
The clauses this control is mapped to in each framework.
- 2 Risk management policy
RBI Cyber Security Framework for UCBs
- Annex I (12)
- 4.2.3 Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server
- 4.2.3 Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server
- 4.2.3 Ensure that Vulnerability Assessment (VA) setting 'Periodic recurring scans' is set to 'on' for each SQL server
- 4.2.3 Ensure that Vulnerability Assessment (VA) setting 'Periodic recurring scans' is set to 'on' for each SQL server
- 164.308(a)(8) Evaluation
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
sql_server_va_setting_periodic_scan_enabled - Checkov Check:
CKV2_AZURE_3 - Powerpipe Control:
azure_compliance.control.sql_server_va_setting_periodic_scan_enabled - Prowler Check:
sqlserver_va_periodic_recurring_scans_enabled
Last reviewed: 2026-10-15