Automated compliance testing tools for 365 apps
summary
Microsoft offers the App Compliance Automation Tool as an Azure-hosted service in public preview (soon adding AWS) that scans defined application boundaries with Azure policies, produces daily control assessments, and bundles evidence into a downloadable compliance report tied to a Marketplace Offer GUID for Partner Center. The current M365 framework lists 110 controls and the tool automates ~40% of them, maps to SOC 2/PCI/ISO27001/FedRAMP/GDPR evidence, surfaces failed reasons and remediation steps, and integrates with GitHub Actions to shift left or even fail builds.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 2:59M365 certification overview
- 5:30Mural’s certification journey
- 8:01App Compliance Automation Tool
- 12:34Q&A
- 17:03Compliance challenges
- 21:23Value of M365 certification
- 23:38Certification timelines
- 25:02Control framework details
- 29:48AI and compliance future
related talks
54mCompliance-As-Code For API Security
42mFederal Compliance Panel Discussion
56mCloud compliance journey: Compliance and audits
24mSecurity Compliance as Code
33mCompliance as Code - Lessons Learned From Regulated Organizations
55mWhat you need to know about security for cloud DevOps
53mAzure Security Center - Your CSPM & CWPP
29mCloud compliance and assurance