🛡️ Microsoft Defender Recommendations for Apply System Updates are not completed🟢⚪
- Contextual name: 🛡️ Recommendations for Apply System Updates are not completed🟢⚪
- ID:
/ce/ca/azure/microsoft-defender/recommendations-for-apply-system-updates - Tags:
- Policy Type:
COMPLIANCE_POLICY - Policy Categories:
SECURITY
Description
Description
Ensure that the latest OS patches for all virtual machines are applied.
Rationale
Windows and Linux virtual machines should be kept updated to:
- Address a specific bug or flaw.
- Improve an OS or application's general stability.
- Fix a security vulnerability.
Microsoft Defender for Cloud retrieves a list of available security and critical updates from Windows Update or Windows Server Update Services (WSUS), depending on which service is configured on a Windows VM. The security center also checks for the latest updates in Linux systems. If a VM is missing a system update, the security center will recommend system updates be applied.
Impact
Running Microsoft Defender for Cloud incurs additional charges for each resource monitored. Please see attached reference for exact charges per hour.
Audit
From Azure Portal
- In the Azure portal, open the portal menu.
- Select
Microsoft Defender for Cloud.- Then the
Recommendationsblade.- Ensure that there are no recommendations for
Apply system updates.... see more
Remediation
Remediation
Follow Microsoft documentation to apply security patches from Defender for Cloud. Alternatively, you can employ your own patch assessment and management tool to periodically assess, report, and install the required security patches for your OS.
policy.yaml
Linked Framework Sections
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|---|---|---|---|---|
| 💼 CIS Azure v5.0.0 → 💼 8.1.10 Ensure that Microsoft Defender for Cloud is configured to check VM operating systems for updates (Automated) | 1 | no data | |||
| 💼 Cloudaware Framework → 💼 Microsoft Defender Configuration | 29 | no data |