Windows web servers should use secure communication protocols
Windows web servers should use the latest version of the industry-standard cryptographic protocol, Transport Layer Security (TLS). TLS secures communications over a network by using security certificates to encrypt a connection between machines.
To protect the privacy of information communicated over the Internet, your web servers should use the latest version of the industry-standard cryptographic protocol, Transport Layer Security (TLS).
What this control checks
Windows web servers should be configured to use secure communication protocols (TLS).
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.compute_vm_secure_communication_protocols_configured.
Framework-specific interpretation
NIST SP 800-53 Rev 5: Mapped to SC-8 (Transmission Confidentiality and Integrity) and SC-8(1) (Cryptographic Protection).
Framework mappings
The clauses this control is mapped to in each framework.
- SC-8(1): Cryptographic Protection
- Transmission Confidentiality And Integrity (SC-8)
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
compute_vm_secure_communication_protocols_configured - Powerpipe Control:
azure_compliance.control.compute_vm_secure_communication_protocols_configured
Last reviewed: 2026-10-11