Azure Compliance ControlsAzure SQL Database
SQL servers should have VA 'Send scan reports to' configured
Configure 'Send scan reports to' with email ids of concerned data owners/stakeholders for a critical SQL servers.
What this control checks
SQL servers have the vulnerability assessment Send scan reports to setting configured
Framework mappings
The clauses this control is mapped to in each framework.
- 2 Risk management policy
- 3 Incident handling
- OPS-13.02B The SIEM system can be deployed within the cloud environment or externally and shall include the following capabilities: - Standardisation of log data;- Automated analysis to identify and correlate potential security incidents;- Capabilities to detect unusual behaviour and potential...
- 4.2.4 Ensure that VA setting Send scan reports to is configured for a SQL server
- 4.2.4 Ensure that VA setting 'Send scan reports to' is configured for a SQL server
- 4.2.4 Ensure that Vulnerability Assessment (VA) setting 'Send scan reports to' is configured for a SQL server
- 4.2.4 Ensure that Vulnerability Assessment (VA) setting 'Send scan reports to' is configured for a SQL server
- 164.308(a)(8) Evaluation
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
sql_server_va_setting_scan_reports_configured - Powerpipe Control:
azure_compliance.control.sql_server_va_setting_scan_reports_configured - Prowler Check:
sqlserver_va_scan_reports_configured
Last reviewed: 2026-10-15