Regulatory compliance reports not accurately affecting security

DG001 386 Reputation points Microsoft Employee
2024-05-02T01:56:01.4533333+00:00

I have some regulatory compliance reports still showing unhealthy resources 3 days after the problem as been remediated. Any idea why this could be happening?

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,250 questions
{count} votes

Accepted answer
  1. James Hamil 22,976 Reputation points Microsoft Employee
    2024-05-06T21:51:55.8266667+00:00

    Hi @DG001 , it's possible that the regulatory compliance reports are not accurately reflecting the current state of your resources due to a delay in data processing or caching. Here are a few things you can try to troubleshoot the issue:

    1. Check the last assessment time for the regulatory compliance standard that is showing unhealthy resources. You can find this information in the Azure portal under "Defender for Cloud" > "Regulatory compliance". If the last assessment time is more than 12 hours ago, it's possible that the assessment has not yet run to reflect the changes you made to remediate the issue.
    2. Check the activity log for the remediation actions you took to fix the unhealthy resources. You can find this information in the Azure portal under "Activity log". Make sure that the remediation actions were successful and completed without errors.
    3. Check the compliance details for the unhealthy resources. You can find this information in the Azure portal under "Defender for Cloud" > "Regulatory compliance" > "Resource compliance". Make sure that the compliance details are up-to-date and reflect the current state of the resources.
    4. If the issue persists, try clearing the cache for the regulatory compliance reports. You can do this by clicking the "Refresh" button in the Azure portal under "Defender for Cloud" > "Regulatory compliance". This will force the system to reprocess the data and generate new reports.

    Please let me know if you have any questions and I can help you further.

    If this answer helps you please mark "Accept Answer" so other users can reference it.

    Thank you,

    James

    0 comments No comments

0 additional answers

Sort by: Most helpful