Forum Discussion
snteran925
Feb 09, 2024Copper Contributor
Regulatory Compliance report - Not Applicable status
We are reveiwing our Regualtory compliance report and notice a lot of "Not Applicable" under the "ResourceState" column. We went through the process of removing all exemptions, we still have a few left but we see in the report, there are many marked as Notapplicable and not sure how those are being implemented.
For example:
Non-internet-facing virtual machines should be protected with network security groups
We do not have an active Exemption for this control, yet we have several Subscriptions with this showing "Notapplicable". Trying to figure out how the Regulatory compliance report generates this report. We have a query that we run within ARG and we do not see this control listed. Any insight would be greatly apprecaited.
Cheers,
No RepliesBe the first to reply