Question

A financial services company is preparing to deploy a new customer-facing workload in Azure. The CISO wants the architecture team to formally evaluate the design against Microsoft's Well-Architected Framework (WAF) before go-live, with a specific focus on aligning security decisions to a recognized set of prescriptive controls and benchmarks. The team needs guidance on which technical controls to implement and how to measure the workload's compliance posture over time. Which approach best aligns the WAF Security pillar evaluation with an actionable, measurable control baseline?

Accepted Answer

Use the WAF Security pillar review together with the Microsoft Cloud Security Benchmark (MCSB) controls surfaced through Microsoft Defender for Cloud's regulatory compliance dashboard to drive and measure remediation.

Answer

Rely exclusively on the Azure Landing Zone Terraform modules to enforce all security controls, treating successful deployment as evidence of WAF compliance.

Answer

Adopt the CIS Azure Foundations Benchmark as the sole control set and disable the MCSB initiative in Defender for Cloud to avoid duplicate findings.

Answer

Perform the WAF Security pillar assessment as a one-time architecture workshop and track outcomes in a spreadsheet without connecting them to any automated control monitoring.