Microsoft Azure Fundamentals (AZ-900)Describe Azure management and governanceMedium
A healthcare organization is migrating patient records to Azure. They must adhere to strict regulatory compliance standards like HIPAA and GDPR, which require comprehensive reporting on data access, retention, and processing. They need a tool that can help them assess their current compliance posture against these complex regulations and provide a measurable score and actionable recommendations. Which service should they utilize?
- AMicrosoft Purview Compliance Manager
- BAzure Policy
- CAzure Advisor
- DAzure Security Center
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Purview Compliance Manager
Microsoft Purview Compliance Manager integrates with various regulatory templates (including HIPAA and GDPR) to help organizations assess, manage, and report on their compliance posture. It provides a compliance score, actionable recommendations, and a centralized view to track progress against complex regulatory requirements, which is exactly what a healthcare organization needs for patient records.
Why the other options are wrong
- B. Azure Policy enforces rules on resources, contributing to compliance, but doesn't provide the overarching compliance management, scoring, and reporting for complex regulations like HIPAA/GDPR.
- C. Azure Advisor provides recommendations for cost, performance, reliability, operational excellence, and security, but not a dedicated framework for managing and scoring against regulatory compliance standards.
- D. Azure Security Center (now Microsoft Defender for Cloud) focuses on security posture and threat protection, not on comprehensive regulatory compliance assessment and scoring.
Microsoft Purview Compliance Manager
A solution in the Microsoft Purview compliance portal that helps organizations simplify compliance and reduce risks. It provides a compliance score, actionable recommendations, and integrated templates for various regulations.
- Assesses compliance against regulatory templates (HIPAA, GDPR).
- Provides a measurable compliance score.
- Offers actionable recommendations to improve posture.
Memory trick: Comply with the law, get your score, take action.