CSPM — Azure CIS Foundations Benchmark v2.1 (subset)

Automated assessment of Azure subscriptions against a curated subset of CIS Azure Foundations Benchmark v2.1. The full benchmark has 90+ controls; this skill implements 6 high-impact checks that cover the most common findings on real subscriptions. Each check is mapped to NIST CSF 2.0.

Honest scope: the table below lists only what src/checks.py actually implements. See the Roadmap at the bottom for documented controls that are not yet automated. PRs welcome — one check per function, one finding row per control.

When to Use

• Azure subscription security posture assessment
• Pre-audit for SOC 2, ISO 27001, HIPAA
• Azure AI Foundry deployment review
• New subscription baseline validation
• Entra ID hygiene audit