What Azure Sentinel is
Azure Sentinel will get the job done for organizations looking specifically for a SIEM for their Azure environment. They're less robust in their support for other cloud providers, but are a great option for organizations looking to keep things simple and consolidated. The vendor site is www.microsoft.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Azure Sentinel covers
Azure Sentinel is in the catalog for these capabilities. Categories: SOC Platform. Catalog tags: Best for Enterprise.
How to evaluate Azure Sentinel in a security program
Use Azure Sentinel as a stack candidate, not as diligence evidence. The oneNorma score for Azure Sentinel is 5.5/10 (percentile 65). If the real gap is in SOC Platform, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.microsoft.com publishes. Contrast it with pentesting and Security Cloud & Compliance.
