Evaluates whether a vulnerability scan for a specified risk level is configured in Security Center. If configured, the resource is evaluated as compliant.
Scenarios
Use this rule to detect and address system vulnerabilities promptly and improve overall system security.
Risk level
Default risk level: high.
You can change the risk level based on your business requirements when you configure this rule.
Compliance evaluation logic
- If a vulnerability scan for a specified risk level is configured in the SAS console, the evaluation result is Compliant.
- If a vulnerability scan for a specified risk level is not configured in the SAS console, the evaluation result is Incompliant. For more information about how to remediate an incompliant configuration, see Incompliance remediation.
Rule details
| Item | Description |
| Rule name | security-center-concern-necessity-check |
| Rule identifier | security-center-concern-necessity-check |
| Tag | SecurityCenter |
| Automatic remediation | Not supported |
| Trigger type | Periodic execution |
| Evaluation frequency | Interval of 24 hours |
| Supported resource type | All Resources |
| Input parameter | Necessities. Default values: asap and later. |
Incompliance remediation
Configure a vulnerability scan for a specified risk level in the SAS console. For more information, see Vulnerability scanning.