Overview

SCU Cost Estimate

This agent typically consumes 0,1-1 SCUs per assessment run, depending on the complexity of your environment and whether additional frameworks are analyzed.

Introduction

Compliance Assistant takes the guesswork out of compliance. If you've ever stared at a compliance framework wondering "do we actually meet these requirements?", this agent is for you. It automatically assesses your organization against the Microsoft Data Protection Baseline (DPB) and GDPR, performs technical gap analysis using real data, and gives you a clear, prioritized roadmap for closing any gaps it finds.

What It Does

• Automatically assesses DPB and GDPR compliance using built-in framework knowledge

• Performs technical gap analysis with KQL queries that check actual vs expected state

• Analyzes additional frameworks when you provide requirements text or documentation URLs

• Creates prioritized roadmaps organized by quick wins (0-30 days), important steps (30-90 days), and strategic thoughts (90+ days)

• Shows the evidence with transparent sources and the actual KQL queries used

• Recommends improvements for enhancing your compliance posture

• Tracks compliance trends over time to monitor progress

Use Cases

1. Quick Compliance Health Check

You need to know where you stand on DPB and GDPR right now. Just run the agent with no parameters and you'll get a complete assessment with gap analysis and a prioritized action plan. No manual checklist review, no guessing, just data-driven results showing exactly what's compliant and what needs work.

2. Pre-Audit Preparation

An audit is coming up and you need to identify gaps before the auditors do. Compliance Assistant performs the same technical checks an auditor would, gives you the findings in advance, and provides a roadmap for closing gaps. The quick wins can often be completed before the audit even starts.

3. Multi-Framework Assessment

You need to comply with DPB, GDPR, and maybe ISO 27001 or SOC 2 as well. The agent assesses your baseline frameworks automatically, then you can add additional frameworks via text input or Microsoft Learn URLs. You get an integrated roadmap addressing requirements across all frameworks, not separate checklists to reconcile manually.

4. Compliance Program Planning

You're building a compliance program and need to prioritize where to invest effort. The agent's roadmap shows you quick wins that deliver immediate value, important steps that address key gaps, and strategic recommendations for long-term maturity. Make decisions based on actual gap analysis, not generic best practices.

5. Tracking Remediation Progress

You've started closing compliance gaps, but how do you know if you're actually improving? Run the agent regularly (monthly or quarterly) to see compliance trends over time. The gap analysis shows exactly which controls have been addressed and which still need work.

Why Compliance Assistant?

The Problem You're Dealing With	How This Helps
Manual compliance checks take forever: Reading frameworks, checking configs, comparing against requirements	Automated assessment: Technical gap analysis with KQL queries in minutes instead of days
Compliance status is unclear: You think you're compliant, but you're not really sure	Evidence-based findings: Actual data showing compliant vs non-compliant controls
Generic checklists don't help: Frameworks tell you what to do, but not what you're missing	Gap analysis: Specific findings showing exactly what's implemented and what isn't
Overwhelming requirements: Hundreds of controls, unclear where to start	Prioritized roadmap: Clear action plan with quick wins, important steps, and strategic items
Multiple frameworks, one goal: Different requirements, unclear overlaps and priorities	Integrated assessment: Unified roadmap addressing all frameworks together
No progress visibility: Fixing things without knowing if compliance is actually improving	Trend tracking: Run regularly to see compliance improvement over time

How It Works

What goes in:

• Your current environment configuration (DPB and GDPR baselines assessed automatically)

• Optional: Additional framework requirements (text or URL to Microsoft Learn docs)

• Optional: Custom time range for analysis (default 90 days)

• Compliance data, security events, audit logs, and policy configurations

What it does:

• Loads built-in knowledge of Data Protection Baseline and GDPR requirements

• Extends with additional frameworks if provided

• Runs KQL queries to check actual state vs expected state for each control

• Identifies gaps, deviations, and non-compliant configurations

• Generates prioritized recommendations based on impact and effort

• Organizes findings into quick wins, important steps, and strategic thoughts

What you get:

• Executive summary of compliance status with key findings

• Gap analysis table showing each control, status, deviation, and recommendation

• Prioritized roadmap with three time horizons (0-30 days, 30-90 days, 90+ days)

• Transparent sources showing KQL queries used and data sources consulted

• Improvement options suggesting ways to enhance compliance assessment

• Compliance trend data if running multiple assessments over time