Microsoft Purview Compliance Manager

Compliance Manager is a posture and evidence platform. It maps Microsoft cloud controls, your tenant configuration, and your manual evidence to regulatory templates (ISO, NIST, SOC 2, PCI, HIPAA, GDPR, FedRAMP, IRAP, Essential Eight, DORA, EU AI Act, and more), gives you a compliance score, and tracks improvement actions with audit-ready evidence collection.

When to use

• Authoring or maintaining one or more regulatory assessments.
• Producing audit evidence packages (SOC 2, ISO 27001 surveillance audits).
• Tracking compliance score over time as a leadership metric.
• Mapping a custom internal framework into a Compliance Manager assessment.

Do not use this skill for Defender for Cloud's regulatory dashboard (defender-for-cloud-hardening), Records Management (purview-records-management), or M365 Secure Score (general security telemetry).

Concept map