Put a regulation to work Working with a regulation in Compliance Manager. We add ISO/IEC 27001:2022 as an assessment, look at the controls grouped by family, open the Logging control and its three improvement actions, implement and document Verify logging settings, let an assessor set Passed. W COMPLIANCE MANAGER Put a regulation to work Ada Admin Eli Employee THE WORKFLOW From regulation to evidence The owner implements. Someone with the Assessor role verifies. REGULATIONS AND ASSESSMENTS The catalog, and what you measure CHOOSE CAREFULLY Three premium regulations, and they go fast Purchased regulationlicenses used 3/3 More templates cost extra.Pick the ones you willactually work with. Microsoft Purview Related solutions Data Security InvestigationsData Lifecycle ManagementData Loss Prevention Assessments Free regulation licenses used0/0 Purchased regulation licenses used2/3 + Add assessment Export actionsUpdate actions5 items AssessmentStatusProgressYour improvement actionsMicrosoft actionsRegulation Compliance Manager › Assessments › ISO 27001:2022 I2 ISO 27001:2022 Manage user access ProgressControlsYour improvement actionsMicrosoft actions 63% of assessment actions completed Microsoft 365Remaining Your improvement actions13 of 110 completed Microsoft actions146 of 148 completed View the status of controls for this assessment, grouped by family. 123 items Search Control status breakdown Control titleControl IDYour improvement actions ▾ Technological controls (1) Logging8.150 of 3 completed Compliance Manager › Assessments › ISO 27001:2022 › Logging L Logging Improvement actionsMicrosoft actions PassedFailed Low RiskFailed Medium RiskNot Assessed 3 items Improvement actionTest statusServicePoints achievedImpactRegulationsAction type ✓ Compliance score +3 points Compliance Manager › Assessments › ISO 27001:2022 › Logging › Verify logging settings Verify logging settings SaveSave and closeExport testing history OwnerImplementation statusTest statusServiceTesting typeTesting source Assign owner ▾ Select None Microsoft 365ManualUser verified DetailsEvidenceRelated controls How to implement Microsoft recommends that your organization capture specific security events in system logs and check the logging settings. Inadequate threat detection coverage and blind spots might be caused by improper logging settings, hindering your security monitoring efforts. How to Use Microsoft Solutions to Implement Your organization can use Microsoft Defender for Identity to verify logging settings and configure specific Windows events to be logged, such as NTLM sign-ins and security group modifications. Select Launch Now to go to the "Health Issues" page. Launch Now + Add evidence NameTypeAdded by Defender for Identity health issues, Oct 2026.pdfDocumentAda Admin No evidence added yet. View controls that contain this improvement action and the regulation impacted by each control. 24 items Related ControlsControl IDRegulation Ada AdminEli EmployeeSearch for a user ✓ Changes saved Improvement actions Improvement actions provide guidance on task completion which can improve your org's compliance score. Action points can take up to 24 hours to update. Export actionsUpdate actionsAccept all updatesAssign to user96 items Regulations: ISO/IEC 27001:2022 × Improvement actionPointsImplementation statusTest status X ExportActions.xlsxDownloaded ExportActions.xlsx · Excel Improvement actionImplementation statusTest status Compliance Manager › Assessments › Create assessment Base your assessment on a regulation Select regulation Regulation nameNo regulation selected AvailabilityNo regulation selected Created byNo regulation selected Add name and group Create a name for your assessment and assign it to an existing or new group. Assessment name * Assessment group * Use existing group Default Group ▾ Create new group Select services Select services and their scope to monitor progress against improvement actions. + Add servicesCreate new service ServiceService Scope Selected Microsoft 365 Review and finish RegulationISO/IEC 27001:2022 Name and groupISO 27001:2022Default Group ServicesMicrosoft 365 New assessment created Select "Done" to view your new assessment. Next Select regulation Choose a regulation as the basis for your assessment. Free regulation licenses used0/0 Activated Microsoft regulations2/3 391 items RegulationCreated by ISO/IEC 27001:2013Microsoft ISO/IEC 27001:2022Microsoft Save Cancel Compliance Manager › Improvement actions › Update improvement actions Complete prerequisites Use this wizard to update improvement actions with your organization's current compliance status. Complete these required steps before continuing: Import updated improvement actions Update improvement actions in the downloaded Excel file and upload the edited file to Compliance Manager. Upload Excel file * Select a file Browse Uploaded file: ExportActions.xlsxUpload a different file Review and finish Review this data to understand the impact of your actions update. All score changes will become permanent once you select Update actions below. Score change Actions modified2 Overall score change0 Change percentage0% Next ✓ 2 improvement actions updated Good to know 1/7 COMPLIANCE MANAGER Put a regulation to work We add ISO/IEC 27001:2022 as an assessment, open the Logging control, and implement and verify one improvement action by hand, from owner and evidence to Passed. informasjonsbeskyttelse.no