Using Azure Policy initiatives for organizational governance
summary
Azure Policy groups enforce cost, security, and jurisdiction rules across subscriptions and resource groups, with built‑ins and custom definitions, the NIST initiative containing 798 NIST policies to audit against. Policies restrict SKUs for VMs/storage/VPN, enforce allowed locations policy for data jurisdiction, and surface remediation tasks to fix noncompliant resources. Audit results feed into Azure Security Center standard (CIS, PCI DSS, ISO 27001, SOC) and assignment is quick but full compliance scanning can take time.
AI-written summary · about
chapters (7)
- 0:00Introduction to Azure policy
- 1:13Understanding Azure policy
- 3:32Implementing compliance
- 6:21Business and regulatory audit
- 9:20Security center integration
- 11:06Practical demonstration
- 15:41Summary and conclusion
related talks
54mImplement DevSecOps in Azure
49mHow Not to Smash Your Azure Security!
31mA Comprehensive Approach to Cloud Security Posture Management
53mTop 18 Azure security fails and how to avoid them
13mKubernetes Ecosystem in Azure
56mSecuring organizations pipelines and integrations in Azure DevOps Q&A
49mTop 5 ways to secure Azure resources
52mImplement DevSecOps in Azure