Control: 2.14 Ensure that 'Notify about alerts with the following severity' is set to 'High'
Description
Enables emailing security alerts to the subscription owner or other designated security contact. Enabling security alert emails ensures that security alert emails are received from Microsoft. This ensures that the right people are aware of any potential security issues and are able to mitigate the risk.
Remediation
From Console
- Login to Azure console and navigate to Security Center.
- Select
Pricing & settings
blade under Management. - Click on the appropriate Management Group, Subscription, or Tenant.
- Click on
Email notifications
. - Enter a valid security contact email address in the
Additional email addresses
field. - Under
Notification types
, check the check box next toNotify about alerts with the following severity (or higher)
, and selectHigh
from the drop down menu. - Click Save.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.cis_v130_2_14
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.cis_v130_2_14 --share
SQL
This control uses a named query:
securitycenter_notify_alerts_configured