| 💼 2.1 Ensure that Microsoft Defender for Servers is set to 'On' - Level 2 (Manual) | | 1 | 1 | |
| 💼 2.2 Ensure that Microsoft Defender for App Service is set to 'On' - Level 2 (Manual) | | 1 | 1 | |
| 💼 2.3 Ensure that Microsoft Defender for Azure SQL Databases is set to 'On' - Level 2 (Manual) | | 1 | 1 | |
| 💼 2.4 Ensure that Microsoft Defender for SQL servers on machines is set to 'On' - Level 2 (Manual) | | 1 | 1 | |
| 💼 2.5 Ensure that Microsoft Defender for Storage is set to 'On' - Level 2 (Manual) | | 1 | 1 | |
| 💼 2.6 Ensure that Microsoft Defender for Kubernetes is set to 'On' - Level 2 (Manual) | | | | |
| 💼 2.7 Ensure that Microsoft Defender for Container Registries is set to 'On' - Level 2 (Manual) | | 1 | 1 | |
| 💼 2.8 Ensure that Microsoft Defender for Key Vault is set to 'On' - Level 2 (Manual) | | 1 | 1 | |
| 💼 2.9 Ensure that Microsoft Defender for Endpoint (WDATP) integration with Microsoft Defender for Cloud is selected - Level 2 (Manual) | | 1 | 1 | |
| 💼 2.10 Ensure that Microsoft Defender for Cloud Apps (MCAS) Integration with Microsoft Defender for Cloud is Selected - Level 2 (Manual) | | 1 | 1 | |
| 💼 2.11 Ensure That Auto provisioning of 'Log Analytics agent for Azure VMs' is Set to 'On' - Level 1 (Automated) | | | | |
| 💼 2.12 Ensure Any of the ASC Default Policy Setting is Not Set to 'Disabled' - Level 1 (Manual _ Not supported, requires a manual assessment) | | | | |
| 💼 2.13 Ensure 'Additional email addresses' is Configured with a Security Contact Email - Level 1 (Automated) | | 1 | 1 | |
| 💼 2.14 Ensure That 'Notify about alerts with the following severity' is Set to 'High' - Level 1 (Automated) | | | | |
| 💼 2.15 Ensure That 'All users with the following roles' is set to 'Owner' - Level 1 (Automated) | | 1 | 1 | |