Unattached disks should be encrypted

Description:

By encrypting disk volumes detached from your Microsoft Azure virtual machines, you have the assurance that your data is unrecoverable without an encryption key and thus provides protection from unwarranted reads. Even if the disk volumes are not attached to any of the VMs provisioned within your Azure cloud account, there is always a risk where a compromised user account with administrative privileges can mount/attach these unencrypted disks, and this action can lead to sensitive information disclosure and/or data leakage.

Remediation/Reference:

This non-Microsoft source gives a good writeup on this process: https://www.cloudconformity.com/knowledge-base/azure/VirtualMachines/enable-encryption-for-unattached-disk-volumes.html#