Azure Security Center automatically assigns its built-in security policies on each subscription that is onboarded. You can configure them in Azure Policy, which also enables you to set policies across Management groups and across multiple subscriptions.
