MT.1065: Ensure all Recovery Services Vaults have soft delete enabled
| ID | MT.1065 |
| Severity | High |
| Suite | Mito |
| Product | Azure |
| Feature | Backup |
| Security area | Data protection |
| Resource type | AzureResource |
| User impact of fixing | Low |
| Effort to fix | Low |
| Framework controls | nist-800-53-r5:CP-9 System Backup |
| MITRE ATT&CK | T1490, T1485 |
| Reads from | Azure Resource Manager |
What this checks and how to fix it
Section titled “What this checks and how to fix it”Soft delete ensures that backup items and recovery points are retained for a period after deletion. This protects against accidental or malicious deletion of backups.
Ensure that all Recovery Services Vaults across all subscriptions have soft delete enabled.
Remediation action
Section titled “Remediation action”To enable soft delete on a Recovery Services Vault:
- Go to the Azure portal.
- Navigate to Recovery Services Vaults
- Select the vault and go to Properties
- Under Soft Delete, ensure it is set to Enabled
Note: New vaults typically have soft delete enabled by default.
Related links
Section titled “Related links”Mito check. Author: brianveldman; contributors: l-gosling. Open-source licences.
Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).
© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.