About This Article
This article was created using an automated generation workflow leveraging generative AI. It reviews current Microsoft Learn Compliance Manager documentation to clarify the meaning of scores and licensing considerations.Verification Status: 📘 Microsoft Official Documentation Verified, Actual Device Not Tested
Microsoft Purview Compliance Manager is a framework for organizing regulatory and standard compliance statuses into assessments, controls, and improvement actions to manage organizational compliance improvements.
A Score of 100 Does Not Equal Regulatory Compliance
The Compliance Manager compliance score is a risk-based metric that visualizes the extent to which recommended improvement actions have been implemented. Microsoft explicitly states that a high score does not guarantee complete compliance with specific laws and regulations.
規制・標準 ↓ Assessment ↓ Controls ↓ Improvement actions ↓ 証跡・テスト・進捗 ↓ Compliance score
Licensing Primarily Changes Available Regulatory Templates
Organizations with Office 365 / Microsoft 365 subscriptions can access Compliance Manager, but the available assessments and templates depend on the contract.
The Microsoft Data Protection Baseline is available across all subscription levels. Under current rules, E5, A5, and G5 subscriptions include up to three additional premium regulations of choice without extra cost, alongside the Data Protection Baseline. Other premium regulatory templates may require separate purchases.
Start by Trying This: Read One Improvement Action
Instead of setting a goal to raise the score right from the start, open a single improvement action from the Microsoft Data Protection Baseline.
1. Improvement actionを1件選ぶ 2. 対象サービスを確認 3. Microsoft側 / 顧客側 / 共有責任を確認 4. 実装手順を読む 5. 自組織で必要かを判断
What to Look For
You succeed if you can explain "who is responsible for execution" and "what evidence needs to be retained."
Try Changing One Item
Open another action in the same category and compare whether the required evidence or responsible department changes. This helps you understand that it is not simply about chasing points.
In Practice, Pair Responsibilities with Evidence
Improvement actions can be linked to owners, implementation status, testing, and evidence. Management scope extends beyond security settings to include policy revisions, training, and operational procedures involving people and processes.
Checkpoints for Administrators
Compliance Manager role
Microsoft Data Protection Baseline
Number of premium regulations included in the contract
Premium template purchase status
Owner for each improvement action
Avoid including excessive personal or confidential information in evidence.
Do not treat scores as legal guarantees.
Microsoft Official Information
Microsoft Purview Compliance Manager: https://learn.microsoft.com/en-us/purview/compliance-manager
Compliance Manager FAQ: https://learn.microsoft.com/en-us/purview/compliance-manager-faq
Regulations and licensing: https://learn.microsoft.com/en-us/purview/compliance-manager-regulations
Regulations list: https://learn.microsoft.com/en-us/purview/compliance-manager-regulations-list
Compliance Manager is not an automated scoring machine that determines regulatory compliance. Its value becomes much clearer when used as a practical operational tool to track items to improve, assignees, and evidence all in one place.
