azure-security-audit

You can audit Azure NSGs for CIS Benchmark compliance by running a read-only assessment that compares security rules against the benchmark to identify overly permissive or misconfigured rules. The scan generates a report highlighting orphaned NICs, missing flow logs, and effective rule disparities to guide remediation.

An Azure NSG security audit performs CIS Azure Foundations Benchmark checks, detects orphaned NSGs, and validates NIC topology. It reviews effective security rules to pinpoint overly permissive configurations, missing flow logs, and effective rule disparities across a targeted subset or an entire subscription.

Yes, you can scope the Azure NSG audit to cover either all NSGs in a subscription or a targeted subset. This allows you to perform rule reviews, topology checks, and compliance assessments on specific network segments while maintaining a read-only, GAIT-logged implementation.

No, the Azure NSG audit does not modify your existing rules because the implementation is strictly read-only. It relies on dedicated Azure tools to perform rule reviews and topology checks, safely identifying misconfigurations and providing remediation guidance without altering your environment.

Effective rule disparities appear in your CIS compliance report when the evaluated Azure NSG rules reveal conflicting or overlapping permissions. The audit identifies these misconfigurations, alongside orphaned NICs and missing flow logs, to help you understand and remediate your cloud security posture.