Azure missing some of CIS - Benchmarks

The older CIS Microsoft Azure Foundations Benchmark blueprint sample is deprecated, which is

likely why you're seeing gaps. The supported way to assess and enforce CIS coverage today is the

built-in Azure Policy regulatory-compliance initiative "CIS Microsoft Azure Foundations Benchmark"

(surfaced in Microsoft Defender for Cloud → Regulatory compliance). Assign that initiative at the

subscription/management-group scope to get current CIS control coverage and compliance reporting.

Heads-up: Azure Blueprints (Preview) is being retired on January 31, 2027, with a phased

retirement beginning July 31, 2026 (no new definitions/versions after Jul 31, 2026; no

definition edits or new assignments after Oct 31, 2026; no assignment edits after Dec 31, 2026).

Resources already deployed remain, but blueprint definitions, assignments, and locks (deny

assignments) are removed at retirement - export anything you want to keep first.

Recommended path: migrate to Azure Deployment Stacks (resource grouping, lifecycle management,

and deny-assignment locking) plus Template Specs for versioned storage.

• Retirement & timeline: https://aka.ms/AzureBlueprintsRetirement

• Migration guide: https://aka.ms/AzureBlueprintsMigration

• FAQ: https://aka.ms/AzureBlueprintsRetirementFAQ