Your organization is preparing to deploy Microsoft 365 Copilot. Leadership has asked the compliance team to produce an assessment that scores the organization against a recognized regulatory framework (such as ISO 27001) and provides prioritized improvement actions with implementation guidance and point values. Which Microsoft Purview capability should the team use?