Describe the compliance management capabilities in Microsoft Purview

Question 1

Describe the Microsoft Purview compliance portal

Answer 1

The portal brings together all of the tools and data that are needed to help understand and manage an orgs compliance needs.

It is available to customers with Microsoft 365 SKU with one of the following roles:
-Global admin
-Compliance admin
-Compliance data admin

Question 2

Describe Compliance Manager

Answer 2

Compliance Manager helps simplify compliance and reduce risk by providing:
-Prebuilt assessments based on common regional and industry regulations and standards.
-Workflow capabilities that enable admins to efficiently complete risk assessments for the organization.
-Step-by-step improvement actions that admins can take to help meet regulations and standards relevant to the organization.
-Compliance score, which is a calculation that helps orgs understand their overall compliance posture.

Compliance Manager tracks the following types of controls:
-Microsoft-managed controls: controls for Microsoft cloud services
-Your controls:
-Shared controls: responsibility for implementing these controls is shared by the org and Micro.

An assessment is a grouping of controls from a specific regulation, standard, or policy.

The compliance manager provides templates to help admins quickly create assessments.

Question 3

Describe the use and benefits of compliance score

Answer 3

Compliance score measures progress in completing recommended improvement action within controls.

The score is calculated using scores that are assigned to actions. Actions come in two types:
-Your improved actions
-Microsoft actions: actions that Microsoft manages for the org.

Actions are categorized as mandatory or discretionary.

the subcategories are:
-Preventative
-Detective
-Corrective