STIGQter: STIG Summary: Microsoft Azure SQL Database Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 02 Jul 2025:

Azure SQL Database must associate organization-defined types of security labels having organization-defined security label values with information in process.

DISA Rule

SV-255314r961272_rule

Vulnerability Number

V-255314

Group Title

SRG-APP-000313-DB-000309

Rule Version

ASQL-00-002600

Severity

CAT II

CCI(s)

• CCI-002263 - Provides the means to associate organization-defined types of security attributes having organization-defined security attribute values with information in process.

Weight

10

Fix Recommendation

Deploy SQL Information Protection (see link below) or Azure SQL Database Row-Level Security (see link below), a third-party software, or add custom data structures, data elements and application code to provide reliable security labeling of information in process.

https://docs.microsoft.com/en-us/azure/security-center/security-center-info-protection-policy?
https://msdn.microsoft.com/en-us/library/dn765131.aspx

Check Contents

If security labeling is not required, this is not a finding.

If security labeling requirements have been specified, but a third-party solution, SQL Information Protection, or an Azure SQL Database Row-Level security solution is implemented that reliably maintains labels on information in process, this is a finding.

Vulnerability Number

V-255314

Documentable

False

Rule Version

ASQL-00-002600

Severity Override Guidance

If security labeling is not required, this is not a finding.

If security labeling requirements have been specified, but a third-party solution, SQL Information Protection, or an Azure SQL Database Row-Level security solution is implemented that reliably maintains labels on information in process, this is a finding.

Check Content Reference

M

Target Key

5500