Does Compliance Manager track only customer-managed controls?

Compliance Manager does not solely track customer-managed controls; it encompasses a broader scope. It evaluates a range of compliance controls that include both customer-managed and Microsoft-managed controls. This comprehensive approach helps organizations gain insights into their compliance obligations across various regulatory frameworks and industry standards, providing a more holistic view rather than limiting the tracking to only those controls that are managed by customers themselves.

By including Microsoft-managed controls, Compliance Manager supports organizations in understanding how Microsoft services comply with regulatory requirements and industry standards. This feature is essential for organizations that rely heavily on cloud services, as it allows them to see both their responsibilities as customers and the compliance commitments of their service providers. Therefore, the capability to track both types of controls enables a more informed compliance strategy and enhances the overall security posture of the organization.