NIST SP 800-207 - Zero Trust Architechture/Tenets of Zero Trust/7 of 29
2.1.7Collect data about asset security posture
Control family: Tenets of Zero Trust
Control description
The enterprise collects as much information as possible about the current state of assets, network infrastructure and communications and uses it to improve its security posture. An enterprise should collect data about asset security posture, network traffic and access requests, process that data, and use any insight gained to improve policy creation and enforcement.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.