# Azure Security Best Practices

The below list introduces the best Practices for Azure Security.

  1. MFA should be enabled on accounts with read permissions on your subscription
  2. External accounts with read permissions should be removed from your subscription
  3. Non-internet-facing virtual machines should be protected with network security groups
  4. Access to storage accounts with firewall and virtual network configurations should be restricted
  5. Qualys guard and Cylance endpoint protection software should be installed on all the ability virtual machines
  6. Storage accounts should be migrated to new Azure Resource Manager resources
  7. Virtual machines should be migrated to new Azure Resource Manager resources
  8. All the security updates should be installed on Virtual machines
Last updated: 9/6/2021, 1:25:50 PM
Feedback