SC-900 Domain 4 Microsoft Compliance Solutions

Microsoft Compliance

A collection of Microsoft compliance and governance solutions.

Microsoft Purview

Microsoft's compliance, governance, and data protection platform.

Microsoft Purview Portal

Central management portal for compliance solutions.

Compliance Manager

Tool used to assess and improve compliance posture.

Compliance Score

A measurement of compliance progress.

Improvement Action

A recommended compliance activity.

Assessment

A measurement of compliance against requirements.

Regulatory Template

A predefined compliance framework.

Service Trust Portal (STP)

Microsoft repository for compliance and audit documentation.

Audit Report

Documentation demonstrating compliance controls.

Privacy

The protection and proper handling of personal data.

Microsoft Priva

Microsoft privacy management solution.

Privacy Risk Management

Identification and mitigation of privacy risks.

Subject Rights Request (SRR)

A request from an individual concerning personal data.

Personal Data

Information relating to an identifiable individual.

Data Classification

The categorization of information by sensitivity.

Sensitive Information Type (SIT)

A pattern used to identify sensitive information.

Trainable Classifier

AI-based classification of content.

Content Explorer

Tool used to locate sensitive information.

Activity Explorer

Tool used to view actions involving sensitive information.

Information Protection

Protection and classification of information.

Sensitivity Label

A label that classifies and protects content.

Sensitivity Label Policy

A policy that publishes sensitivity labels.

Encryption Protection

Protection applied through encryption.

Content Marking

Application of headers, footers, or watermarks.

Data Loss Prevention (DLP)

Technology preventing inappropriate sharing of sensitive information.

DLP Policy

Rules used to detect and protect sensitive information.

Policy Tip

User notification generated by a DLP policy.

Endpoint DLP

DLP controls applied to endpoint devices.

Adaptive Protection

Risk-based adjustment of protection controls.

Insider Risk Management

Detection and investigation of potentially risky user activity.

Risk Indicator

A signal suggesting elevated user risk.

Communication Compliance

Detection of policy violations in communications.

Code of Conduct Policy

A policy monitoring workplace conduct.

Regulatory Compliance Policy

A policy supporting regulatory requirements.

eDiscovery

Process of identifying, collecting, and producing electronic evidence.

eDiscovery Standard

Basic search, hold, and export capabilities.

eDiscovery Premium

Advanced review and analysis capabilities.

Case

A container used to manage eDiscovery investigations.

Custodian

A person whose data is subject to investigation.

Legal Hold

Preservation of content for legal purposes.

Review Set

A collection of evidence prepared for review.

Audit

A record of activities performed in Microsoft services.

Audit Log

A repository of recorded activities.

Retention

A process governing how long content is kept.

Retention Policy

A policy that retains or deletes content after a specified period.

Retention Label

A label applying retention settings.

Retention Label Policy

A policy publishing retention labels.

Disposition Review

A review process before permanent deletion.

Records Management

The management of records according to business and legal requirements.

Record

A document declared as an official record.

Regulatory Record

A record with additional restrictions and protections.

File Plan

A framework used to organize records.

Data Lifecycle Management

The governance of content from creation through deletion.

Knowledge Management

The organization and use of information resources.

Information Governance

The management of information throughout its lifecycle.

Data Residency

The geographic location where data is stored.

Data Sovereignty

The concept that data is subject to the laws of its location.

Data Retention

The preservation of data for a defined period.

Data Deletion

The permanent removal of information.