UK Cyber Essentials Plus

This page describes UK Cyber Essentials Plus compliance controls in Azure Databricks.

UK Cyber Essentials Plus overview

Cyber Essentials Plus is a UK government-backed certification that demonstrates an organization’s commitment to cybersecurity. It requires an independent assessment of security controls to protect against common cyber threats.

Key points

• Focuses on five key security controls (firewalls, secure configuration, user access control, malware protection, patch management).
• Involves external testing and verification.
• Recognized by UK government and industry.

Enable UK Cyber Essentials Plus compliance controls

To configure your workspace to support processing of data regulated by the UK Cyber Essentials Plus standard, the workspace must have the compliance security profile enabled. Only specific preview features are supported for processing regulated data. For details on the compliance security profile, supported preview features, and supported regions, see Compliance security profile.

You are solely responsible for verifying that sensitive information is never entered in customer-defined input fields, such as workspace names, compute resource names, tags, job names, job run names, network names, credential names, storage account names, and Git repository IDs or URLs. These fields might be stored, processed, or accessed outside the compliance boundary.

To enable UK Cyber Essentials Plus compliance controls, see Configure enhanced security and compliance settings.

Regional support for features

This table shows feature availability for the selected compliance standard across all supported Databricks regions. Some features may be listed as available before they are actually released.