Governance and compliance implementation

Understanding Microsoft Azure Management and Governance

Maarten Van den Broeck

Senior Content Developer at DataCamp

Service Trust Portal

Details Microsoft's security, privacy and compliance practices related to the Azure cloud environment
Resources and documentation on risk assessment and compliance best practices
- Certifications (e.g., ISO, GDPR)

Service Trust Portal

Microsoft Purview

Comprehensive data management service for Azure and other Microsoft products
Combination of previous Azure Purview with Microsoft 365 Compliance
Specific focus on managing data assets:
- Data security
- Data governance
- Data risk & compliance

Microsoft Purview

Microsoft Purview use cases

Data Catalog: centralized overview of all data assets and their metadata
Data Map: visual representation of data flows through systems and applications
Data labeling, classification, and metadata enrichment
Support for data transfer and sharing

Example Data Map in Purview

Microsoft Purview: Compliance Manager

Dashboard to assess current compliance status with a specific set of regulations
- Current compliance status summarized with a scoring system
- Recommendations to improve compliance and reduce risks

Compliance Manager

Example use case: using the Service Trust Portal

You are responsible for handling customer data subject requests (DSRs), i.e., the right to review, correct, or delete personal data, according to the GDPR (General Data Protection Regulation)

With the help of the Service Trust Portal, you can:

look up the rules for DSRs in the GDPR
look up documentation for how to handle such requests in Azure

GIF showing use of the Service Trust Portal

Let's practice!

Understanding Microsoft Azure Management and Governance