Question

A financial services company runs workloads across Azure, AWS, and Google Cloud. The CISO wants a single strategy, aligned with the Microsoft Cloud Security Benchmark (MCSB), to continuously measure the security posture of all three clouds against a consistent set of controls, identify misconfigurations, and prioritize remediation using attack-path context. The solution must minimize the number of separate tools the security team must operate. Which approach best meets these requirements?

Accepted Answer

Enable Microsoft Defender for Cloud with the Defender CSPM plan, connect the AWS and GCP accounts as multicloud connectors, and use the MCSB as the default regulatory compliance standard across all environments.

Answer

Deploy each cloud provider's native posture tool (Microsoft Secure Score, AWS Security Hub, and GCP Security Command Center) and aggregate their findings into a shared Power BI dashboard.

Answer

Use Microsoft Sentinel data connectors to ingest configuration logs from all three clouds and build custom analytics rules that compare settings against MCSB control text.

Answer

Apply Azure Policy initiatives mapped to MCSB to the Azure subscriptions and rely on manual quarterly audits with third-party scanners for the AWS and GCP environments.