What's changed: Deepened SC-900 Chapter 4 to the AZ-900 baseline (Service Trust Portal vs Purview/Compliance Manager with shared-responsibility mapping & table; sensitivity labels/DLP/retention classify→protect→lifecycle flow & table; insider risk/eDiscovery/audit table & scenario; FAQ, traps). Localized 3 figures
4.1Compliance Management Tools
Understand the Service Trust Portal for Microsoft’s compliance info, and Microsoft Purview (Compliance Manager and Compliance Score) for managing your own compliance.
Compliance has two sides: "how Microsoft itself complies" and "how you manage your own compliance." The Service Trust Portal shows the former; Microsoft Purview handles the latter.
4.1.1Two tools
- Service Trust Portal: a portal to obtain Microsoft’s audit reports (ISO, SOC), certifications, and compliance documents—verifying the "cloud-side" compliance.
- Microsoft Purview: an integrated suite to manage your own compliance (including information protection, data lifecycle, and risk management).
- Compliance Manager / Compliance Score: assess posture against regulations (GDPR, ISO) and score improvement actions to help prioritize.
Continue reading — free sign-up
You're reading the free preview. Sign up free to read this section in full, plus every chapter (including 4+) and all questions.