A cloud operations team wants a single dashboard that continuously assesses the security configuration of their Azure subscriptions, identifies misconfigurations such as storage accounts without encryption, and provides a prioritized numeric measurement they can track over time to improve their overall security state. Which Microsoft capability should they use?