Skip to main content

Security Alert Emails to Subscription Owners Not Enabled

Overview​

Enabling security alert emails to subscription owners ensures that they receive security alert emails from Microsoft. This ensures that they are aware of any potential security issues and can mitigate the risk in a timely fashion.

Remediation From Azure Portal:

  1. From Azure Home select the Portal Menu
  2. Select Microsoft Defender for Cloud
  3. Click on Environment Settings
  4. Click on the appropriate Management Group, Subscription, or Workspace
  5. Click on Email notifications
  6. In the "All users with the following roles" dropdown select Owner
  7. Click Save

Vendor​

Azure

Cloud Service​

CIS Azure v2.0.0 2.1.18

References​

https://docs.microsoft.com/en-us/azure/security-center/security-center-provide-security-contact-details, https://docs.microsoft.com/en-us/rest/api/securitycenter/securitycontacts/list, https://docs.microsoft.com/en-us/rest/api/securitycenter/security-contacts, https://docs.microsoft.com/en-us/security/benchmark/azure/security-controls-v3-incident-response#ir-2-preparation--setup-incident-notification

Severity​

3

Item Types​

Custom::Microsoft::Subscription