| 💼 5.1 Configuring Diagnostic Settings | 5 | | | |
| 💼 5.1.1 Ensure that a 'Diagnostics Setting' exists - Level 1 (Manual _ Not supported, requires a manual assessment) | | | | |
| 💼 5.1.2 Ensure Diagnostic Setting captures appropriate categories - Level 1 (Automated) | | 1 | 1 | |
| 💼 5.1.3 Ensure the storage container storing the activity logs is not publicly accessible - Level 1 (Automated _ Not supported, requires a manual assessment) | | | | |
| 💼 5.1.4 Ensure the storage account containing the container with activity logs is encrypted with BYOK (Use Your Own Key) - Level 2 (Automated) | | 1 | 1 | |
| 💼 5.1.5 Ensure that logging for Azure KeyVault is 'Enabled' - Level 1 (Automated) | | 1 | 1 | |
| 💼 5.2 Monitoring using Activity Log Alerts | 9 | | | |
| 💼 5.2.1 Ensure that Activity Log Alert exists for Create Policy Assignment - Level 1 (Automated) | | 1 | 1 | |
| 💼 5.2.2 Ensure that Activity Log Alert exists for Delete Policy Assignment - Level 1 (Automated) | | 1 | 1 | |
| 💼 5.2.3 Ensure that Activity Log Alert exists for Create or Update Network Security Group - Level 1 (Automated) | | 1 | 1 | |
| 💼 5.2.4 Ensure that Activity Log Alert exists for Delete Network Security Group - Level 1 (Automated) | | 1 | 1 | |
| 💼 5.2.5 Ensure that Activity Log Alert exists for Create or Update Network Security Group (Network Security Group Rule) - Level 1 (Automated) | | | | |
| 💼 5.2.6 Ensure that activity log alert exists for the Delete Network Security Group Rule - Level 1 (Automated) | | | | |
| 💼 5.2.7 Ensure that Activity Log Alert exists for Create or Update Security Solution - Level 1 (Automated) | | | | |
| 💼 5.2.8 Ensure that Activity Log Alert exists for Delete Security Solution - Level 1 (Automated) | | 1 | 1 | |
| 💼 5.2.9 Ensure that Activity Log Alert exists for Create or Update or Delete SQL Server Firewall Rule - Level 1 (Automated) | | | | |
| 💼 5.3 Ensure that Diagnostic Logs Are Enabled for All Services that Support it. - Level 1 (Manual _ Not supported, requires a manual assessment) | | | | |