Distinguish the work item
Purview Compliance Manager helps organize assessment and improvement work. It can group controls, assign recommended improvement actions, retain implementation/testing evidence and track status. This is a different purpose from searching recorded user activities or classifying a document. A useful first question is whether the reviewer needs a record of an event, an evidence document, or a managed action that someone must implement and test. Those objects can support each other without being interchangeable.
Controls and assessments
An assessment groups controls from a regulation, standard or policy in a stated service scope. The reference distinguishes Microsoft-managed, customer-managed and shared controls. For a customer-managed action, provider status does not establish the customer’s implementation. For a shared control, responsibility still needs to be separated rather than credited wholesale to either party. Available templates and features depend on entitlement; this lesson does not promise a particular license or infer that selecting a template completes the assessment.
Progress and evidence
The compliance score tracks progress on recommended improvement actions and can help prioritize work. It is not a guarantee of compliance or a substitute for evaluating customer controls. A rising score may be useful while a particular control still lacks adequate implementation/testing evidence. Keep the aggregate indicator and the action-level evidence in separate rows. An overall number also does not by itself decide whether a particular regulation applies to an organization or whether its obligations are satisfied.
Worked example
Fictional teaching case: a conservation lab has an action assigned to a records coordinator. The coordinator must implement an internal process and document its test. Compliance Manager’s action workflow can hold ownership, notes, evidence and status. The reviewer receives only an assessment score and a provider-managed action’s completion state. Neither is the missing customer process test. Request evidence tied to the lab’s assigned action. The answer does not dismiss the score; it uses the score for progress and uses implementation/testing evidence for the specific control question.
Transfer check
Now a fictional assessor wants to organize controls for a chosen internal policy and review their progress within a defined service scope. Should the direct answer be an Audit search because some evidence could be logged? Check basis: an assessment is the relevant grouping of controls. Audit records may contribute implementation evidence later, but selecting events by user/date does not create the named control grouping. If the question changed to who performed a supported operation last week, Audit search would answer that other evidence request.
Check scope and result
Identify the managed object, operator and evidence required. State the role of the progress measure without promoting it into proof of effectiveness or legal status. These conceptual examples do not create an assessment, assign staff work, calculate a real score or apply a regulatory conclusion. Educator review and learner trials remain pending; the course’s difficulty labels are editorial estimates.
Try it, then explain it.
Complete a short set without looking at the example. After each answer, explain which evidence or rule supports your decision and why the alternatives do not fit.
Sources & authorship
Original OpenExam explanations and examples. References support the concepts; they are not the source of copied questions. Independent educator review is pending.
Learn about auditing solutions in Microsoft Purview | Microsoft LearnMicrosoft Purview Compliance Manager | Microsoft LearnCompliance Manager scoring | Microsoft LearnGet started with the Microsoft Service Trust Portal | Microsoft Learn