Azure_compliance/control/check

Ensure Trusted Locations Are Defined In Conditional Access Policies
Description: Ensure trusted locations are defined in Microsoft Entra ID Conditional Access policies to identify known and secure network locations, such as...
Tue, 23 Dec, 2025 at 10:03 AM
Ensure that an exclusionary Geographic Access Policy is considered
Description: An exclusionary geographic access policy restricts user sign-ins from countries or regions where the organization does not operate. Implementi...
Tue, 23 Dec, 2025 at 10:15 AM
Ensure that A Multi-factor Authentication Policy Exists for Administrative Groups
Description: This policy is like, For designated users, they will be prompted to use their multi-factor authentication (MFA) process on login. Rationale:...
Mon, 21 Aug, 2023 at 5:29 AM
Ensure that A Multi-factor Authentication Policy Exists for All Users
Description: Ensure that a Multi-Factor Authentication (MFA) policy exists for all users in Microsoft Entra ID to require additional verification beyond pa...
Tue, 23 Dec, 2025 at 10:26 AM
Ensure Multi-factor Authentication is Required for Risky Sign-ins
Description: For designated users, they will be prompted to use their multi-factor authentication (MFA) process on login. Rationale: Enabling multi-fact...
Mon, 21 Aug, 2023 at 5:33 AM
Ensure Multi-factor Authentication is Required for Azure Management
Description: Ensure Multi-Factor Authentication (MFA) is required for Azure management access by enforcing MFA through Microsoft Entra ID Conditional Acces...
Tue, 23 Dec, 2025 at 10:31 AM
Ensure that 'Users can create Azure AD Tenants' is set to 'No'
Description: Microsoft Entra ID (formerly Azure Active Directory) allows users with specific permissions to create new tenants within the Azure ecosystem. ...
Tue, 23 Dec, 2025 at 10:38 AM
Ensure Access Review is Set Up for External Users in Azure AD Privileged Identity Management (PIM
Description: Access Reviews in Microsoft Entra ID Privileged Identity Management (PIM) ensure that external users (guests, partners, B2B users) who have pr...
Tue, 23 Dec, 2025 at 11:22 AM
Ensure that a Custom Bad Password List is set to 'Enforce' for your Organization
Description: This Policy provides a Global Banned Password policy that applies to Azure administrative and normal user accounts. This is not applied to use...
Mon, 21 Aug, 2023 at 5:51 AM
Ensure `User consent for applications` is set to `Do not allow user consent`
Description: This control ensures that Microsoft Entra ID is configured to prevent users from granting application permissions without administrator approv...
Tue, 23 Dec, 2025 at 11:40 AM