5.2. Compliance Management Capabilities of Microsoft Purview
💡 First Principle: Microsoft Purview is Microsoft's unified compliance and data governance platform, and its compliance management capabilities specifically turn the abstract GRC cycle (Phase 2.1.5) into a concrete, trackable workflow — defining what needs to be assessed, tracking progress against it, and scoring how well an organization is actually doing.
Why care: without a tool like this, "are we compliant" becomes a scattered spreadsheet exercise repeated from scratch for every regulation. Purview's compliance capabilities centralize that work into one continuously-updated place.
⚠️ Common Misconception: Treating the Purview portal, Compliance Manager, and compliance score as three unrelated products. They're layered: the portal is the entry point, Compliance Manager is the workflow tool inside it, and compliance score is a metric generated by that workflow.
