What's New in Microsoft Purview Compliance Manager - Microsoft Purview (Compliance) (2023)

  • article

in the text:Learn more about the latest updates in Compliance Manager.


If you are not an E5 customer, you can use a 90-day trial of the Microsoft Purview solution to discover how additional Purview capabilities can help your organization manage data security and compliance needs. start nowMicrosoft Purview Compliance Portal Proefcentrum.Learn moreRegistration and Trial Terms.

mei 2023

Compliance Manager is now integrated with Microsoft Defender for Cloud, so you can assess your compliance status across Microsoft 365, Microsoft Azure, Google Cloud Platform (GCP), and Amazon Web Services (AWS) with resource-level testing and cloud-specific guidance. This new integration provides customers with a single interface within Compliance Manager, making it easier to manage compliance across their organization's digital assets. learn more aboutMulticloud support in Compliance Manager.

(Video) Microsoft Purview Compliance Manager

Compliance Manager also has an integrated set of connectors to help you understand your compliance obligations across the many services you use in your organization. Connectors for Salesforce and Zoom are available now, with more coming soon. learn more aboutUsing connectors in Compliance Manager.

In addition, you can now grant scoped access to regulatory-based assessments. For each regulation template, you can assign users a role that gives them access to all assessments created for that regulation. learn more aboutGive users access to administrative templates.

January 2023

Preview: Compliance Manager has new and improved actions that match those in Microsoft Priva to strengthen your organization's compliance with data privacy regulations. learn more abouthardshipand get details about itAutomated testing and monitoring of improvementsin Compliancemanager.

December 2022

Evaluation templates that belong to the same plan family now count as one template. This change means that when you purchase a premium template license for a plan, that license will apply to all levels and versions of that plan. judgementtemplate listand summaryChanges to template licenses from December 2022.

Another new feature for December: Improvement Actions now provide better visibility into related checks and evaluations, helping you better understand the impact of completion actions. Each improvement action detail page has a new oneRelated controls tabLists all controls associated with the action, along with a link to a description of each control. insideto summarizeshare, the numbers belowEvaluateNow linked. After you select a song, you'll see a pop-up with all the ratings associated with that action.

november 2022

Compliance Manager allows you to assign user roles specific to individual assessments. This feature allows you to give reviewers limited access to Compliance Manager. learn more aboutGive users access to individual reviews.

augustus 2022

Compliance Manager has released the following new review templates:

(Video) Simplify regulatory compliance with Microsoft Purview Compliance Manager

  • ISM version 3.5 Australian Information Security Registered Assessor Program (IRAP) - Official

view ourComplete list of assessment templates.

July 2022

Compliance Manager has released the following new review templates:

  • Hong Kong - Code for Banking Practices and Payment Cards

view ourComplete list of assessment templates.

mei 2022

Compliance Manager has released the following new review templates:

Europe, Middle East and Africa (EMEA)

  • Qatar National Information Assurance (NIA)
  • Data Privacy Laws in UAE

US Government Community (GCC) Intermediate, GCC Advanced, and Department of Defense (DoD) customers should see these templates available in the coming weeks.

view ourComplete list of assessment templates.

(Video) Microsoft Purview Compliance Manager

March 2022

new templates available

Compliance Manager has released the following new review templates:


  • ISO 37301
  • NIST 800-207 - Zero Trust Architecture
  • SIG 2022

US government

  • CMMC v2 niveau 1
  • CMMCv2 level 2


  • Information Security Management Act - California, British Columbia

view ourComplete list of assessment templates.

Ongoing compliance assessment for improvement actions

We are adding automated testing and evidence generation for over 35 enhanced actions in Compliance Manager that were not previously included in Secure Score. Through Continuous Compliance Assessments you can receive updates on what improvements you have made if they are relevant to your compliance assessment and you have been given access to the relevant solutions. Ongoing compliance reviews also enable users to understand the scoring logic of your improvement actions and provide insight and evidence as to why you got a certain score. This feature works with existing integrations with Microsoft 365 Secure Score, and any automations you previously configured will continue to work as they are. learn more aboutAutomated test configuration.

February 2022

Alerts and alert policies

Users can now set up alerts for changes in Compliance Manager that an organization wants to track. Using the easy setup wizard, you can create alert policies to create notifications when the following types of events occur: Improvement Action score changes, Improvement Action assignment changes, test or deployment status changes in Improvement Actions, and file uploads or documentation in Remove Improvement Actions from the tab. Visit for more informationCompliance Manager Alerts and Alert Policies.

(Video) Microsoft Purview - 5 New & Updated Features that You NEED to Know!

Try out the recommended review templates for your organization

Your organization can now get recommendations from Compliance Manager on which assessments may be most relevant to you, and get started with a quick setup process. For more information on recommendations and how to try the advanced evaluation templates before purchasing a license, seeStart the trial version of Premium Assessment.

november 2021

Zero Trust integration for basic data protection templates

Zero Trust is a proactive, integrated approach to security across all layers of a digital asset that explicitly and continuously verifies every transaction, grants least privilege, and relies on intelligence, advanced detection, and real-time threat response. The Data Protection Baseline template for Compliance Manager, available to all users, now integrates 57 new controls and 36 new Zero Trust actions, aligned to the following control families:

  • Zero Trust application
  • Zero Trust App Development Guide
  • Zero Trust Endpoint
  • Zero Trust data
  • Zero Trust identity
  • Zero Trust infrastructure
  • Zero Trust Network
  • Zero Trust visibility, automation and orchestration

New sample template

The following assessment templates are now available in preview:

  • ISO 27001:2013 for Azure (example)
  • ISO 27001:2013 for Dynamics 365 (example)
  • FedRAMP Moderate for Dynamics 365 (Preview)
  • FedRAMP Moderate for Azure (preview)
  • FedRAMP High for Azure (example)
  • FedRAMP High for Dynamics 365 (example)
  • SOC 2 for Azure (example)
  • SOC 2 for Dynamics 365 (example)
  • ISO 27018:2019 for Azure (example)
  • ISO 27018:2019 voor Dynamics 365 (preview)

October 2021

New review template

We've released new review templates, including:

  • Colorado Privacywet (CPA)
  • Virginia Consumer Data Privacy Act (CDPA)
  • Egypt - Data Protection Law
  • Australia - ASD Essential 8 Maturity Level 1
  • Australia - ASS Essential 8 Maturity Level 2
  • Australia - ASS Essential 8 maturity level 3

Integrate with Microsoft Priva

Compliance Manager can now work hand-in-hand with Microsoft Priva, a solution that helps you protect the personal data your organization stores in Microsoft 365. Priva provides tools to visualize and understand your data, implement policies to manage key risk scenarios and handle data subject consent requests. Taking steps in Priva to protect your stored personal data helps with your privacy assessment in Compliance Manager and can help improve your compliance score. To see how Priva and other solutions can contribute to your score, and to understand potential opportunities for further improvement, seesolutiontab in Compliance Manager. You can also find more information about Priva atLearn more about Microsoft Private.

July 2021

We've added the ability to create reviews for products other than Microsoft 365 based on a new global release of our templates. For more information, visit theUse the rating model.

mei 2021

New review template

We've released 75 new review templates, including:

(Video) Introducing Microsoft Purview

  • Australian privacy law
  • CIS Microsoft 365 Foundation level 1 in 2
  • Germany - IT Regulatory Requirements for Financial Institutions (BAIT)
  • Sarbanes-Oxley-wet
  • South Africa - Information Access Facilitation Act

view full listReview template.

april 2021

Supporting US Government DoD customers

Compliance Manager is now available for US Government DoD customers and for US Government Community (GCC) Intermediate and GCC Advanced customers.

March 2021

Active and inactive templates

Each review page and review template page has an active template counter. This counter shows the number of eligible templates you have used under your license agreement. displayTemplate availability and licensinglearn more.


What are the three phases of Microsoft 365 compliance? ›

Microsoft 365's internal compliance program is designed to ensure security and privacy are considered at all phases of the development process. Each service begins the assurance lifecycle with the execution of three related efforts: security, privacy, and compliance.

What is the new name of Microsoft compliance Center? ›

Effective April 19, 2022, Microsoft Purview replaces product names of formerly Microsoft 365 Compliance and Azure Purview. This change was made to consolidate data governance, compliance, and risk management capabilities under a single product name.

Which two action types can be tracked by the Microsoft compliance Manager? ›

Compliance Manager tracks two types of actions:
  • Your improvement actions: Managed by your organization.
  • Microsoft actions: Managed by Microsoft.
May 4, 2023

What are three techniques for monitoring compliance? ›

How we monitor compliance
  • desktop monitoring and assessment using publicly available chemical information.
  • review of data submitted by introducers and other agencies.
  • pre-arranged or unannounced inspections using the monitoring powers available to us under the Regulatory Powers Act.

What are three 3 types of controls used in the control processes? ›

Output controls involve measurable results. Behavioural controls involve regulating activities rather than outcomes. Clan control relies on a set of shared values, expectations, traditions, and norms.

What is the difference between E3 and E5 compliance? ›

E3 provides the full suite of enterprise functionality with Office applications (Word, Excel, PowerPoint, etc.) and additional security functionality. E5 is the most advanced package, with all the features of E3, alongside advanced email security functionality, analytics, and phone systems.

What is the difference between purview E3 and E5? ›

Both E3 and E5 include Microsoft Teams but E5 allows access to Microsoft Teams Calling assigning each user a Teams phone number (at no extra cost). This number can be used via mobile devices or on a computer essentially replacing any need for company phone.

What are the three pillars of Microsoft? ›

What we value
  • Innovation. We believe technology can and should be a force for good and that meaningful innovation can and will contribute to a brighter world in big and small ways. ...
  • Diversity and inclusion. We thrive on diverse voices. ...
  • Corporate Social Responsibility.

What is advanced compliance in Microsoft? ›

Office 365 Advanced Compliance offers additional security measures through Customer Lockbox, which requires two levels of approval for your data to even be accessed by Microsoft.

What is Microsoft purview? ›

Microsoft Purview provides a unified data governance solution to help manage and govern your on-premises, multicloud, and software as a service (SaaS) data. Easily create a holistic, up-to-date map of your data landscape with automated data discovery, sensitive data classification, and end-to-end data lineage.

Who is the head of compliance at Microsoft? ›

Jason Bero - Privacy, Risk, and Compliance - Microsoft | LinkedIn.

What is the role of compliance manager in Microsoft? ›

Microsoft Compliance Manager helps you manage your organization's compliance needs including the inventory of data protection risks, changes within your chosen regulation or certification, reporting to auditors, and more.

Where is the Microsoft purview compliance portal? ›

To access the compliance portal, go to https://compliance.microsoft.com and sign in as a global administrator, compliance administrator, or compliance data administrator.

Which Microsoft 365 compliance Center feature can you use to identify all the documents? ›

You can use the Content search eDiscovery tool in the Microsoft Purview compliance portal to search for in-place content such as email, documents, and instant messaging conversations in your organization. Use this tool to search for content in these cloud-based Microsoft 365 data sources: Exchange Online mailboxes.

What are the three R's of compliance? ›

The three R's of infection control compliance: recommendations. Regulations. Resources.

What are the four types of compliance? ›

The Different Types Of Compliance And Why They Matter
  • 1: Financial Compliance.
  • 2: IT And Data Compliance.
  • 3: Health And Safety Compliance.
  • 4: Legal Compliance.
Mar 17, 2022

What are the 5 components of internal control? ›

Five Interrelated Components
  • Control Environment. The control environment sets the tone of an organization, influencing the control consciousness of its people. ...
  • Risk Assessment. ...
  • Control Activities. ...
  • Information and Communication. ...
  • Monitoring.

What are the 3 automatic control systems? ›

They are: proportional, integral, and derivative. These control methods may be used singly or in combinations in applying automatic control to a process, depending upon the complexity of the process and the extent of control required.

Is purview included in E5? ›

Included with an E5 licence, Microsoft Purview “provides a unified data governance solution to help manage and govern your on-premises, multicloud, and software as a service (SaaS) data.” Tools featured within the package include: Microsoft Purview Data Loss Prevention. Microsoft Purview Compliance Manager.

Why is E5 better than E3? ›

The main difference between the Microsoft E3 and Microsoft E5 licenses is that the Microsoft E5 license includes more robust security and analytics tools for larger enterprises. If you need these features, then the Microsoft E5 license is the better option for your organization.

Is Intune included in E3? ›

Microsoft Intune Plan 1

A cloud-based unified endpoint management solution that is included in the following licenses: Microsoft 365 E5. Microsoft 365 E3.

Is Azure Purview and Microsoft purview the same? ›

As you are aware that on April 19, 2022 Azure Purview is now called as Microsoft Purview. Microsoft Purview combines the former Azure Purview and Microsoft 365 compliance solutions and services together into a single brand.

Can you upgrade from E3 to E5? ›

For example, you can upgrade from an Office 365 E3 plan to an Office 365 E5 plan.

Why upgrade from E3 to E5? ›

You don't have to increase your IT budget to leverage E5. In fact, an E5 upgrade can help you reduce costs. E5 licensing delivers capabilities that can replace many of the costly solutions in your environment. Through consolidation, you can reduce costs and simplify management, making you more secure.

What is the hierarchy of management at Microsoft? ›

Microsoft's Executive Leadership

This is made up of CEO Satya Nadella and: the President and Vice Chair, the Chief Marketing Officer, the Chief Human Resources Officer, the Chief Financial Officer, and the Executive Vice President for Business Development, Strategy, and Ventures.

What are the 3 design pillars? ›

Emma defines the three pillars of design systems, namely, the design language, the component library, and the style guide, and explains why these pillars are essential to design systems.

How many principles are there in Microsoft? ›

However, Microsoft focuses on six key privacy principles when making decisions about data.

What is Microsoft e5 compliance? ›

Microsoft offers comprehensive compliance and data governance solutions to help your organization manage risks, protect and govern sensitive data, and respond to regulatory requirements. Safeguard sensitive data across clouds, apps, and endpoints.

What is Microsoft compliance policy? ›

Compliance policies in Intune: Define the rules and settings that users and devices must meet to be compliant. Include actions that apply to devices that are noncompliant. Actions for noncompliance can alert users to the conditions of noncompliance and safeguard data on noncompliant devices.

What is Microsoft 365 compliance feature? ›

Microsoft Purview Communication Compliance

Communication Compliance (formerly named Microsoft 365 Communication Compliance) helps minimize communication risks by helping you detect, capture, and take remediation actions for inappropriate messages in your organization.

Is purview a SaaS or Paas? ›

Microsoft Purview's solutions in the governance portal provide a unified data governance service that helps you manage your on-premises, multicloud, and software-as-a-service (SaaS) data.

Is Microsoft purview good? ›

Microsoft Purview is the #1 ranked solution in Data Governance tools and #8 ranked solution in top Microsoft Security Suite tools. PeerSpot users give Microsoft Purview an average rating of 8.4 out of 10. Microsoft Purview is most commonly compared to Alation Data Catalog: Microsoft Purview vs Alation Data Catalog.

Is Microsoft purview part of E3? ›

Microsoft Purview Message Encryption is offered as part of Office 365 Enterprise E3 and E5, Microsoft 365 Enterprise E3 and E5, Microsoft 365 Business Premium, Office 365 A1, A3, and A5, and Office 365 Government G3 and G5.

What is the salary of compliance lead in Microsoft? ›

The base salary for SOX Compliance Program Manager in companies like MICROSOFT CORP range from $136,000 to $177,010 with the average base salary of $154,430.

How much does the CMO of Microsoft make? ›

$308K. The estimated total pay for a CMO at Microsoft is $308,474 per year. This number represents the median, which is the midpoint of the ranges from our proprietary Total Pay Estimate model and based on salaries collected from our users. The estimated base pay is $185,444 per year.

Who is the top level manager of Microsoft? ›

Satya Nadella

He also serves as Chief Executive Officer of the company since 2014.

Is compliance manager a stressful job? ›

Yes, being a compliance officer is stressful. Compliance officers experience mental health issues, such as depression and anxiety, at higher rates than other careers.

Which of the 5 key functions of a compliance department is this? ›

Understanding the Compliance Department

A compliance department typically has five areas of responsibility—identification, prevention, monitoring and detection, resolution, and advisory. A compliance department identifies risks that an organization faces and advises on how to avoid or address them.

What is the difference between a compliance officer and a compliance manager? ›

Your compliance manager (also commonly called a compliance officer) works to assure that your organization remains within the strict boundaries of regulatory requirements and meets all official standards that govern your business.

What are the two types of classification in Microsoft purview? ›

Types of classification

The Microsoft Purview governance portal supports both system and custom classifications.

Which Microsoft 365 team supports security and compliance efforts as part of maintaining compliance certifications? ›

Microsoft Teams is built on the Microsoft 365 and Office 365 hyper-scale, enterprise-grade cloud, delivering the advanced security and compliance capabilities our customers expect.

What are the three access control elements? ›

Three elements make up access control: identification, authentication, and authorization.

What are the different types of controls monitoring? ›

Types of Controls
  • Preventive controls are proactive in that they attempt to deter or prevent undesirable events from occurring.
  • Corrective controls are put in place when errors or irregularities have been detected.
  • Detective controls provide evidence that an error or irregularity has occurred.

What are the three types of role Basic Access RBAC controls in Microsoft Azure? ›

The way you control access to resources using Azure RBAC is to assign Azure roles. This is a key concept to understand – it's how permissions are enforced. A role assignment consists of three elements: security principal, role definition, and scope.

What are the four 4 main access control model? ›

The 4 main access control models are:

Discretionary access control (DAC) Mandatory access control (MAC) Role-based access control (RBAC) Rule-based access control (RuBAC)

What are the 7 categories of access controls? ›

The seven main categories of access control are directive, deterrent, compensating, detective, corrective, and recovery.

What are the 4 processes of access control? ›

The typical access control process includes identification, authentication, authorization, and auditing.

What are the 5 types of management control? ›

These five types of management control systems are (i) cultural controls, (ii) planning controls, (iii) cybernetic controls, (iv) reward and compensation controls and (v) administrative controls.

What are the 4 types of internal controls? ›

Preventive Controls
  • Separation of duties.
  • Pre-approval of actions and transactions (such as a Travel Authorization)
  • Access controls (such as passwords and Gatorlink authentication)
  • Physical control over assets (i.e. locks on doors or a safe for cash/checks)

What are the 5 areas of compliance? ›

A compliance department typically has five areas of responsibility—identification, prevention, monitoring and detection, resolution, and advisory. A compliance department identifies risks that an organization faces and advises on how to avoid or address them.

What are two examples of compliance? ›

Some examples of compliance include:
  • A child cleaning up their room because their parent asked them to.
  • A student helping another student with their homework when asked.
  • Buying an item because a saleperson encourages you to do so.
  • Helping a friend because they ask you for a favor.
Jun 8, 2022

What is the difference between IAM and RBAC? ›

RBAC defines permissions based on a person's job function, known outside of AWS as a role. Within AWS a role usually refers to an IAM role, which is an identity in IAM that you can assume. IAM does include managed policies for job functions that align permissions to a job function in an RBAC model.

What is the difference between AAA and RBAC? ›

Authentication, authorization, and accounting (AAA) is a term for a framework for controlling access to computer resources, enforcing policies and auditing usage. RBAC (Role Based Access Control) is a way that dictates how a subject can access objects.


1. Planning your Security Compliance with Microsoft Purview
(Valto IT Services)
2. Microsoft Purview eDiscovery. How it Works!
(Andy Malone MVP)
3. Microsoft Purview and Exchange
4. The future of data governance: introducing Microsoft Purview
(Microsoft Security)
5. How Microsoft Purview Can help With Compliance Data Governance | Full Tutorial
(Patriot Consulting Technology Group)
6. Microsoft Purview for Compliance and Data Governance


Top Articles
Latest Posts
Article information

Author: Tyson Zemlak

Last Updated: 10/21/2023

Views: 5431

Rating: 4.2 / 5 (63 voted)

Reviews: 86% of readers found this page helpful

Author information

Name: Tyson Zemlak

Birthday: 1992-03-17

Address: Apt. 662 96191 Quigley Dam, Kubview, MA 42013

Phone: +441678032891

Job: Community-Services Orchestrator

Hobby: Coffee roasting, Calligraphy, Metalworking, Fashion, Vehicle restoration, Shopping, Photography

Introduction: My name is Tyson Zemlak, I am a excited, light, sparkling, super, open, fair, magnificent person who loves writing and wants to share my knowledge and understanding with you.