A compliance officer needs to create a custom compliance assessment in Microsoft Purview Compliance Manager to track the organization's implementation of internal AI governance controls that are not part of any standard regulatory framework. Which Compliance Manager feature enables this?
Select an answer to reveal the explanation.
Short Explanation
Here's the deal — you create a custom assessment template with custom controls and improvement actions. That lets you track internal AI governance controls that aren't in any built-in regulatory framework.
Full Explanation
The correct feature is creating a custom assessment template with custom controls and improvement actions, because Microsoft Purview Compliance Manager allows organizations to create custom assessment templates that define their own control families, controls, and improvement actions beyond the built-in regulatory framework templates. The custom template can represent the organization's internal AI governance policy, with each control mapped to specific technical or process improvement actions. This enables tracking compliance against internal standards. The approach of modifying an existing NIST AI RMF assessment by adding internal control requirements is wrong because modifying a built-in assessment template is not permitted; you would need to duplicate or create a new template to add custom controls. The approach of using the Compliance Score dashboard to add manual score adjustments for AI controls is wrong because the Compliance Score dashboard reflects the aggregated score from assessment controls; you cannot add manual score adjustments without underlying control and improvement action configuration. The approach of creating a Communication Compliance policy to monitor AI governance adherence is wrong because Communication Compliance is a monitoring tool for detecting policy violations in communications; it does not provide a compliance assessment tracking framework.