Vulnerability Assessment (VA) setting 'Also send email notifications to admins and subscription owners' should be set for SQL servers

azure.sql

Description

Enabling the vulnerability assessment (VA) setting is recommended, along with the option to send email notifications to admins and subscription owners. By enabling this setting, scan reports and alerts are automatically sent to relevant individuals, reducing the time required to identify risks and take necessary corrective actions. This ensures timely response to security vulnerabilities and helps maintain a proactive approach to securing the system.

Remediation

From the console

  1. Go to SQL servers.
  2. Select a server instance.
  3. Click on Security Center.
  4. Select Configure next to Enabled at subscription-level.
  5. In Section Vulnerability Assessment Settings, configure Storage Accounts.
  6. Select Also send email notifications to admins and subscription owners.
  7. Click Save.