Microsoft Azure Fundamentals (AZ-900)Describe Azure management and governanceMedium
A healthcare organization is migrating patient records to Azure. They must adhere to strict compliance standards such as HIPAA (Health Insurance Portability and Accountability Act) and GDPR (General Data Protection Regulation). They need a service to help them track their compliance posture, identify gaps, and provide actionable insights for improvement. Which Azure service is designed to help organizations meet these complex regulatory requirements?
- AAzure Policy
- BAzure Security Center
- CMicrosoft Purview Compliance Manager
- DAzure Advisor
Show answer & explanationAnswer & explanation
Correct answer: C. Microsoft Purview Compliance Manager
Microsoft Purview Compliance Manager is a workflow-based solution in the Microsoft Purview compliance portal that helps manage your organization’s compliance posture. It provides a risk-based score, actionable recommendations, and template assessments for various regulations like HIPAA and GDPR.
Why the other options are wrong
- A. Azure Policy enforces rules for resource configurations, contributing to compliance, but doesn't provide a centralized compliance score or workflow for multiple regulations.
- B. Azure Security Center focuses on security posture management and threat protection, not specifically regulatory compliance tracking and scoring.
- D. Azure Advisor provides recommendations for cost, security, reliability, operational excellence, and performance, but not a dedicated compliance management workflow.
Microsoft Purview Compliance Manager
A feature within the Microsoft Purview compliance portal that helps organizations simplify compliance and reduce risks by providing a compliance score, actionable insights, and pre-built templates for various regulations.
- Provides a compliance score to track progress.
- Offers pre-built assessment templates for regulations (e.g., GDPR, HIPAA).
- Helps identify and remediate compliance gaps.
Memory trick: Compliance Manager scores your adherence to the rules.