Meeting compliance obligations

1 October 2020 Security Services & Risk Management

Businesses operating in South Africa can now map and understand their obligations, roles and responsibilities to comply with local regulations and legislation – most notably the Protection of Personal Information Act (PoPIA) – with Microsoft’s Compliance Manager tool, announced recently at Microsoft Ignite.

“The protection of data and personal information is a critical obligation for organisations with access to this information, and this obligation is made ever more important as the world moves further into the cloud,” says Colin Erasmus, Modern Workplace Business Group lead at Microsoft.

Microsoft Compliance Manager is a user-friendly, centralised dashboard and tool that allows organisations to efficiently map and monitor regulatory adherence as it relates to their use of Microsoft cloud services on Microsoft 365 or Azure Active Directory.

“It serves several functions, not the least of which is being to provide a centralised, visual representation of an enterprise’s compliance posture, calculating a risk-based compliance score that measures progress towards data protection and adherence to regulatory standards,” says Kelly Chalom, GDPR and data privacy compliance specialist at Cloud Essentials. Cloud Essentials is a partner that contributed to the mapping of the various laws and standards, including local compliance legislation such as PoPIA, to Microsoft’s control framework for Compliance Manager.

Other legislation that has been mapped to the tool includes regional and global compliance standards such as GDPR and applicable ISO (International Organisation for Standardisation) standards, among others.

This mapping and laying out of roles and responsibilities to get a compliance score enables enterprises to identify where the gaps lie in meeting their compliance obligations and take action to address these gaps.

“Not only does it enable enterprises to visualise their compliance posture, it also allows for secure cloud storage of critical compliance documentation that is key to demonstrating the enterprise’s compliance as required by the legislation,” says Chalom.

“The Compliance Manager tool takes an holistic approach to compliance, combining technology with a level of care to ensure that organisations in South Africa understand their compliance obligations, can see where they are in terms of meeting these obligations through their compliance score and take action by allocating roles and responsibilities within the organisation to ensure they are fully compliant with laws such as PoPIA,” concludes Erasmus.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

“This Is Theft!” SASA slams Mafoko Security
News & Events Security Services & Risk Management Associations
The Security Association of South Africa (SASA) has issued a stark warning that the long-running Mafoko Security Patrols scandal is no longer an isolated case of employer misconduct, but evidence of a systemic failure in South Africa’s regulatory and governance structures.

Read more...
Making a mesh for security
Information Security Security Services & Risk Management
Credential-based attacks have reached epidemic levels. For African CISOs in particular, the message is clear: identity is now the perimeter, and defences must reflect that reality with coherence and context.

Read more...
Privacy by design or by accident
Security Services & Risk Management Infrastructure
Africa’s data future depends on getting it right at the start. If privacy controls do not withstand real-world conditions, such as unstable power, fragile last-mile connectivity, shared devices, and decentralised branch environments, then privacy exists only on paper.

Read more...
From friction to trust
Information Security Security Services & Risk Management Financial (Industry)
Historically, fraud prevention has been viewed as a trade-off between robust security and a seamless customer journey, with security often prevailing. However, this can impair business functionality or complicate the customer journey with multiple logins and authentication steps.

Read more...
Security ready to move out of the basement
AI & Data Analytics Security Services & Risk Management
Panaseer believes that in 2026, a board member at a major corporation will lose their job amid rising breaches and legal scrutiny, as organisations recognise that cyber risk is a business risk that CISOs cannot shoulder alone.

Read more...
Cyber remains top business risk, but AI fastest riser at #2
News & Events Security Services & Risk Management
The Allianz Risk Barometer 2026 ranks cybersecurity, especially ransomware attacks, as the #1 risk, while AI is the biggest riser and jumps from #10 to #2, highlighting the emerging risks for companies in almost all industry sectors.

Read more...
OT calculator to align cyber investments with business goals
Industrial (Industry) Information Security Security Services & Risk Management
The OT Calculator has been developed specifically for industrial organisations to assess the potential costs of insufficient operational technology (OT) security. By offering detailed financial forecasts, the calculator empowers senior management to make well-informed decisions.

Read more...
From digital transformation to digital sovereignty
Security Services & Risk Management IoT & Automation
As cyberthreats grow, data regulations tighten, and AI becomes central to economic competitiveness, countries are recognising the need to control and protect their own digital assets.

Read more...
The age of Lean 4.0: Orchestrating intelligence and efficiency
Security Services & Risk Management
The convergence of Lean principles and AI (what we now call Lean 4.0) is no longer a theoretical exercise; it is the defining operational paradigm for survival and growth in a complex, data-intensive economy.

Read more...
Risks of open-source intelligence escalating in crime
Security Services & Risk Management Residential Estate (Industry) Smart Home Automation
CMS estimates that open-source intelligence has played a role in 20 - 30% of robberies over the past 12 months. In cybercrime, global research consistently shows that many offences rely on some form of open-source data exploitation.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.