# Ensure that Microsoft Defender Recommendation for 'Apply system updates' status is 'Completed' (Manual)

- Source: https://support.icompaas.com/support/solutions/articles/62000229844-ensure-that-microsoft-defender-recommendation-for-apply-system-updates-status-is-completed-manual
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [General](https://support.icompaas.com/support/solutions/62000037933) › [Azure Compliance / Control / Check](https://support.icompaas.com/support/solutions/folders/62000168797)
- Last updated: 2026-06-09
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

Description:  
This control checks the Microsoft Defender for Cloud recommendation called “Apply system updates.” If this recommendation is not shown, it means all systems have the required updates installed. The goal is to ensure systems are fully patched and secure.

  

Rationale:

Applying system updates protects devices from known vulnerabilities. When this Microsoft Defender recommendation is completed, it means your systems are up to date and less likely to be attacked.

  

Impact:

Keeping system updates applied reduces security risks. There is no negative impact, except that systems must stay updated on time.

  

Default Value:

By default, Microsoft Defender shows “Apply system updates” only when updates are missing. If all updates are installed, the recommendation disappears.

  

Pre-requisites:

-   You need access to Microsoft Defender for Cloud
    
-   The account must have Security Reader or higher permissions
    

  

Test Plan:

1.  Go to the Azure portal at [https://portal.azure.com](https://portal.azure.com/).
    
2.  In the portal, search for Microsoft Defender for Cloud.
    
3.  Under the General section, click Recommendations.
    
4.  Search for Apply system updates.
    
5.  If no recommendation appears, the status is Completed.
    

  
  

Implementation Steps:

1.  Go to the Azure portal at [https://portal.azure.com](https://portal.azure.com/).
    
2.  In the portal, search for Microsoft Defender for Cloud.
    
3.  Under the General section, click Recommendations.
    
4.  Search for Apply system updates.
    

5.  If the recommendation lists machines, install the required updates on those machines using your standard update method.
    
6.  Wait for Defender for Cloud to rescan the environment.
    
7.  Return to Recommendations and search again.
    
8.  If the recommendation no longer appears, the status is Completed.
    

Backout Plan:

There is no backout plan. Once updates are applied, they cannot be undone. If needed, reinstall a previous OS version or snapshot (rarely required).

  

Reference:

-   [https://learn.microsoft.com/en-us/azure/defender-for-cloud/plan-multicloud-security-get-started](https://learn.microsoft.com/en-us/azure/defender-for-cloud/plan-multicloud-security-get-started)

## Related compliance guidance

- [SOC 2 compliance: a practical implementation guide for cloud-native SaaS teams](https://support.icompaas.com/compliance/soc-2-trust-services-criteria): Configuration checks like this one are the technical half of a SOC 2 / ISO 27001 programme — the guide shows where they fit, what else an auditor expects, and how to evidence them.
- [ISO/IEC 27001:2022 compliance: a practical implementation guide](https://support.icompaas.com/compliance/iso-27001-2022): ISO 27001 Annex A.8 (technological controls) is where cloud hardening evidence lands; the guide shows how to run the ISMS around it.