Describing security baselines for Azure
Microsoft Defender for Cloud provides you with in-depth features for a CSPM for your Azure, hybrid, and multi-cloud infrastructure. You may be wondering how Microsoft determines and provides the information to your subscription for recommendations for improvement within the secure score. This is accomplished through the security baselines for Azure. When your Azure and Microsoft Defender for Cloud subscription is created, the security baseline for Azure is enabled through the Azure Security Benchmark. This is used to assess your infrastructure against Microsoft and its partners' best practices.
The Azure Security Benchmark has the following components and features: