This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Note
The most up-to-date Azure Security Benchmark is available here.
Ensure that all system data, configurations, and secrets are automatically backed up on a regular basis.
| Azure ID | CIS IDs | Responsibility |
|---|---|---|
| 9.1 | 10.1 | Customer |
Enable Azure Backup and configure the backup source (Azure VMs, SQL Server, or File Shares), as well as the desired frequency and retention period.
| Azure ID | CIS IDs | Responsibility |
|---|---|---|
| 9.2 | 10.2 | Customer |
Enable Azure Backup and target VM(s), as well as the desired frequency and retention periods. Backup customer managed keys within Azure Key Vault.
| Azure ID | CIS IDs | Responsibility |
|---|---|---|
| 9.3 | 10.3 | Customer |
Ensure ability to periodically perform data restoration of content within Azure Backup. Test restoration of backed up customer managed keys.
| Azure ID | CIS IDs | Responsibility |
|---|---|---|
| 9.4 | 10.4 | Customer |
For on-premises backup, encryption-at-rest is provided using the passphrase you provide when backing up to Azure. For Azure VMs, data is encrypted-at-rest using Storage Service Encryption (SSE). Use Azure role-based access control to protect backups and customer managed keys.
Enable Soft-Delete and purge protection in Key Vault to protect keys against accidental or malicious deletion. If Azure Storage is used to store backups, enable soft delete to save and recover your data when blobs or blob snapshots are deleted.
Training
Module
Design a solution for backup and disaster recovery - Training
You learn how to select appropriate backup solutions for Azure workloads. You also learn how to select appropriate disaster recovery options for these workloads.
Certification
Microsoft Certified: Azure Security Engineer Associate - Certifications
Demonstrate the skills needed to implement security controls, maintain an organization’s security posture, and identify and remediate security vulnerabilities.
Events
Aug 13, 3 AM - Aug 13, 3 AM
Take your business to the AI frontier—join our free Microsoft event!
Learn moreAsk Learn is an AI assistant that can answer questions, clarify concepts, and define terms using trusted Microsoft documentation.
Please sign in to use Ask Learn.
Sign in