A compliant cloud environment is a guarantee for good and secure working of the environment. What is defined in cloud governance, is described as guidance in Microsoft CAF. The controls from security frameworks (CIS, ISO) are a source of information to build compliancy statement around it, and it comes down to measuring the cloud operations and security configuration, and getting the operational insights on a secure environment.

The solution consists of an engine to perform the checks and a rich library with checks that can be used to evaluate your cloud environment compliancy. Data is gathered and evaluated, and results are visualized via PowerBI. If something becomes non-compliant, one has the option to automatically fix the issue and, in this way, enforce a compliant cloud environment.

The Cloud Configuration Compliancy Catalog solution is a centralized SaaS solution that scans the Azure environment. The defined rules for the environment are checked and compliancy dashboards are available to evaluate the scan. Non-compliant resources in the Azure environment can be automatically remediated with the proper actions. A compliant Azure environment guarantees that the base rules are set as recommended by Microsoft and the base security configuration is implemented.