Many organizations adhere to a variety of compliance standards or protocols. Some organizations choose to do this for their own benefit, while others are required to by their customers, constituents, or other statutory obligations.

Whatever the reason driving compliance, Microsoft 365 provides tools to help organizations achieve and maintain compliance. One of the benefits of using Microsoft as a cloud service provider is being able to leverage the investments they make in security and compliance efforts.

When compiling documentation for their own audits, organizations can include attestations and audited controls documents as part of their compliance package. The Audit Reports can be grouped and filtered by technology, industry, and report types, as shown in the following screenshot:

Audit reports are freely available but do require a sign-in to a Microsoft 365 tenant. 

These audit reports and trust documents can be used as part of an organization's overall auditing and compliance package. Microsoft provides another service, Compliance Manager, for organizations to track their progress toward completing various compliance goals.