docs: fix metadata, expand compliance list, add DoD IL6

Author: duongau

articles/firewall/compliance-certifications.md

@@ -1,25 +1,39 @@
 ---
 title: Azure Firewall certifications
-description: A list of Azure Firewall certifications for PCI, SOC, and ISO.
-services: firewall
+description: Learn about Azure Firewall compliance certifications including CSA STAR, ISO, SOC, PCI DSS, HITRUST, FedRAMP, and DoD across global and industry-specific audit programs.
 author: duongau
 ms.service: azure-firewall
 ms.topic: concept-article
-ms.date: 04/28/2023
+ms.date: 03/28/2026
 ms.author: duau
 # Customer intent: "As a compliance officer in a regulated industry, I want to review the certifications of Azure Firewall, so that I can ensure it meets the necessary regulatory requirements for our organization."
 ---
 
 # Azure Firewall certifications
 
-To help you meet your own compliance obligations across regulated industries and markets worldwide, Azure maintains the largest compliance portfolio in the industry both in terms of breadth (total number of offerings) and depth (number of [customer-facing services](https://azure.microsoft.com/services/) in assessment scope). 
+To help you meet your own compliance obligations across regulated industries and markets worldwide, Azure maintains the largest compliance portfolio in the industry both in terms of breadth (total number of offerings) and depth (number of [customer-facing services](https://azure.microsoft.com/services/) in assessment scope).
 For service availability, see [Products available by region](https://azure.microsoft.com/global-infrastructure/services/).
 
 ## Azure Firewall audit scope
 
-Microsoft retains independent, third-party auditing firms to conduct audits of Microsoft cloud services. The resulting compliance assurances are applicable to both Azure and Azure Government cloud environments. Compliance offerings are grouped into four segments: globally applicable, US government, industry specific, and region/country specific. Azure compliance certificates and audit reports state clearly which cloud services are in scope for independent third-party audits. Different audits may have different cloud services in audit scope.
+Microsoft retains independent, third-party auditing firms to conduct audits of Microsoft cloud services. The resulting compliance assurances apply to both Azure and Azure Government cloud environments. Compliance offerings are grouped into four segments: globally applicable, US government, industry specific, and region or country specific. Azure compliance certificates and audit reports clearly state which cloud services are in scope for independent third-party audits. Different audits might have different cloud services in audit scope.
 
-Azure Firewall is included in many Azure compliance audits such as CSA STAR, ISO, SOC, PCI DSS, HITRUST, FedRAMP, DoD, and others. For the latest insight into Azure Firewall compliance audit scope, see [Cloud services in audit scope](/azure/compliance/offerings/cloud-services-in-audit-scope).
+Azure Firewall is included in many Azure compliance audits. The following list shows the key certifications by category:
+
+**Global, industry, and regional:**
+- CSA STAR
+- ISO/IEC 27001, 27017, and 27018
+- SOC 1 Type 2, SOC 2 Type 2, and SOC 3
+- PCI DSS Level 1
+- HIPAA BAA
+- HITRUST CSF
+- GSMA
+
+**US government:**
+- FedRAMP High
+- DoD IL2, IL4, IL5, and IL6 (Azure Government)
+
+For the authoritative and up-to-date list of which Azure services are in each audit scope, see [Cloud services in audit scope](/azure/compliance/offerings/cloud-services-in-audit-scope).
 
 ## Next steps