Azure Security Baseline for SaaS: Scope and Evidence
Apply Azure security guidance to your SaaS tenant and actual services. Use the verification register to record resource configuration, shared responsibilities, evidence dates and exceptions instead of treating policy assignment as proof of implementation.