Question

A compliance officer at a healthcare organization has run an assessment in Microsoft Purview Compliance Manager against a regulatory template. The assessment lists several recommended improvement actions, some of which require configuration changes that must be completed and verified by a specialized team. The officer wants a way to route these specific actions to that team, track their completion status, and record supporting evidence for an upcoming audit. Which Compliance Manager capability should the officer use?

Accepted Answer

Assign each improvement action to the responsible team members and upload evidence, tracking the implementation and testing status within the action

Answer

Create a Data Loss Prevention policy that alerts the specialized team whenever the regulatory requirement is violated

Answer

Export the Compliance Manager score to Microsoft Secure Score and reassign the tasks from the Defender portal

Answer

Configure a retention policy so that the improvement action records are preserved for the duration of the audit