A fire department IT lead presents Compliance Manager scores to the risk committee. What do those scores help communicate?

Compliance Manager scores help a fire department IT lead communicate progress and remaining improvement actions toward compliance frameworks relevant to the municipal tenant. The score reflects how assessed controls are implemented versus what remains open, giving a risk committee a shared language for prioritization—not a measure of Entra Secure Score identity posture, DLP rule effectiveness, or Purview eDiscovery evidence completeness.

Using Entra Secure Score improvement recommendations to communicate posture against identity risks fails the score's meaning: Secure Score measures security configuration posture, not Compliance Manager progress toward compliance frameworks. Judging the effectiveness of data loss prevention rules governing sharing of sensitive municipal records fails the score's meaning: Compliance Manager scores assess control implementation against frameworks, not the operational effectiveness of specific DLP rules. Treating the completeness of collected audit evidence prepared through Purview eDiscovery searches for legal case reviews as a Compliance Manager score fails the improvement-actions concept: scores track framework control progress, not eDiscovery evidence completeness.

Exam caveat: AB-900 expects recognition that Compliance Manager communicates framework progress and open improvements. Scores are directional assessment outputs, not legal certifications. Related Secure Score experiences measure overlapping security themes but are not identical to Compliance Manager's framework improvement focus.

Operational check: Present the current score alongside the top open improvement actions, owners, and target dates; explicitly state that Entra Secure Score posture, DLP effectiveness, and Purview eDiscovery evidence are separate from Compliance Manager framework progress—and that identity baselines remain required regardless of score trends.