Describe features and tools in Azure for governance and compliance

Microsoft Purview

a family of data governance, risk, and compliance solutions that helps you get a single, unified view into your data. Microsoft Purview brings insights about your on-premises, multicloud, and software-as-a-service data together.

With Microsoft Purview, you can stay up-to-date on your data landscape thanks to:

• Automated data discovery

• Sensitive data classification

• End-to-end data lineage

Monitor unencrypted SQL Database in Security Center

This policy monitors for unencrypted SQL databases and servers.

Monitor OS vulnerabilities in Security Center

This policy monitors servers that don't satisfy the configured OS vulnerability baseline.

Monitor missing Endpoint Protection in Security Center

This policy monitors for servers that don't have an installed endpoint protection agent.

Resource Lock

prevents resources from being accidentally deleted or changed.

Service Trust portal

a portal that provides access to various content, tools, and other resources about Microsoft security, privacy, and compliance practices.

provides a quick access hyperlink to return to the Service Trust Portal home page.

My Library

lets you save (or pin) documents to quickly access them on your My Library page. You can also set up to receive notifications when documents in your My Library are updated.

All Documents

is a single landing place for documents on the service trust portal. From All Documents, you can pin documents to have them show up in your My Library.

How can you prevent creation of non-compliant resources, without having to manually evaluate each resource?

Azure Policy

What's the best way to prevent inadvertent deletion of a resource?

Azure resource locks

Azure Policy

a JSON document that acts as a rule for evaluating Azure resources against business requirements