A compliance officer needs to assess the organization's readiness against the NIST AI Risk Management Framework using Microsoft tools. Which Microsoft Purview feature provides pre-built assessments mapped to AI-specific regulatory frameworks?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — b is correct because Microsoft Purview Compliance Manager includes pre-built assessment templates for various regulatory frameworks, including the NIST AI RMF (Risk Management Framework). These assessments map Microsoft controls to framework requirements, provide improvement actions, and track compliance scores specific to AI governance requirements.
Full explanation below image
Full Explanation
B is correct because Microsoft Purview Compliance Manager includes pre-built assessment templates for various regulatory frameworks, including the NIST AI RMF (Risk Management Framework). These assessments map Microsoft controls to framework requirements, provide improvement actions, and track compliance scores specific to AI governance requirements. A is wrong because Purview Information Protection handles data classification and labeling, not regulatory compliance assessment. C is wrong because the Data Catalog (formerly Azure Purview) is for data governance and lineage, not compliance framework assessments. D is wrong because Insider Risk Management identifies risky user behaviors, not compliance posture against regulatory frameworks.