What should you use to evaluate whether your company’s Azure environment meets regulatory requirements?

Microsoft Defender for Cloud is the designated Azure service for security posture management and threat protection. A core feature is its regulatory compliance dashboard, which continuously assesses your Azure, hybrid, and multi-cloud environments against controls and best practices from various standards and regulations (e.g., ISO 27001, PCI DSS, SOC TSP). It provides a compliance score and actionable recommendations to help you address any identified gaps, thereby streamlining the process of meeting regulatory requirements.

B. Azure Advisor: Provides personalized best-practice recommendations to optimize Azure resources for reliability, security, performance, cost, and operational excellence, but it does not specifically audit against formal regulatory standards.

C. Azure Service Health: Informs you about the health of the Azure platform and services, including outages or planned maintenance. It does not evaluate your specific environment's configuration or compliance.

D. Azure Knowledge Center: This is a general term for documentation and support resources, not an automated tool for evaluating an environment's compliance status.

1. Microsoft Learn. "Tutorial: Improve your regulatory compliance." Microsoft Defender for Cloud documentation. States, "Defender for Cloud helps streamline the process for meeting regulatory compliance requirements, using the regulatory compliance dashboard... The regulatory compliance dashboard shows the status of all the assessments within your environment for your chosen standards and regulations."

2. Microsoft Learn. "Describe the capabilities of Microsoft Defender for Cloud." AZ-900: Microsoft Azure Fundamentals course, Module: Describe security, privacy, compliance, and trust. Section: "Regulatory compliance dashboard". This section explicitly details how Defender for Cloud provides insights into your compliance posture against a collection of supported standards.

3. Microsoft Learn. "Introduction to Azure Advisor." Azure Advisor documentation. States, "Advisor is a personalized cloud consultant that helps you follow best practices to optimize your Azure deployments." Its focus is on optimization across five pillars, not formal compliance auditing.

4. Microsoft Learn. "What is Azure Service Health?" Azure Service Health documentation. Defines the service as providing "personalized guidance and support when issues with Azure services affect you," confirming its role is to monitor the platform, not customer configurations.