Summary

This chapter introduced the principles of managing regulatory and privacy requirements using the features and solutions available in Microsoft Purview. We learned how to plan an organizational compliance journey in adherence to regulatory standards such as GDPR. We also learned about the capabilities of the Microsoft Purview Compliance Manager and how it can be used to work with improvement actions, assessments, and assessment templates to improve your compliance posture and score. Finally, we learned how to use Microsoft Priva to manage our privacy requirements in Microsoft 365 and how to create, manage, and edit policies to minimize and manage risks such as data exposure. We also examined how, with Subject Rights Requests, we can respond to requests from data subjects regarding any personal data that our organization may be storing about them.

The next chapter will cover the principles of managing the Insider Risk Management controls and policies in Microsoft Purview and...