Continuous assessment of cloud resource configuration to detect misconfigurations and risks, with recommendations to improve the security posture. In Defender for Cloud it shows up as recommendations and the secure score.
In SC-900: Foundational CSPM is free and on by default (recommendations based on the Microsoft cloud security benchmark, secure score, and inventory). The paid Defender CSPM plan adds attack path analysis and AI security posture. It is contrasted with CWP, workload protection.
CSPM (Cloud Security Posture Management) is a concept that can show up on the exam. Check the full guide to see it in context.