| 📝 Databricks Diagnostic Log Delivery is not configured 🟢 | | 🟢 x3 |
| 📝 Databricks network security groups are not configured 🟢 | | 🟢 x3 |
| 📝 Databricks Personal Access Tokens (PATs) are not restricted and expirable 🟢 | | 🟢 x3 |
| 📝 Databricks users and groups are not synced from Microsoft Entra ID 🟢 | | 🟢 x3 |
| 📝 Databricks Unity Catalog is not configured 🟢 | | 🟢 x3 |
| 📝 Workspace is not deployed in a customer-managed virtual network (VNet) 🟢 | 1 | 🟢 x6 |
| 📝 Workspace is not encrypted using customer-managed key (CMK) 🟢 | 1 | 🟢 x6 |
| 📝 Workspace traffic is not encrypted between cluster worker nodes 🟢 | | 🟢 x3 |