fix lists

Author: ceperezb

learn-pr/wwl-sci/design-solutions-regulatory-compliance/includes/2-translate-compliance-requirements-security-solution.md

@@ -118,9 +118,9 @@ Not every resource can meet every policy. Design an exception process that:
 
 Start with a minimum viable governance baseline:
 
-1. **Assign regulatory compliance initiatives** - Enable built-in initiatives in Defender for Cloud that map to your required frameworks (MCSB, PCI-DSS, ISO 27001)
-2. **Create a management group hierarchy** - Organize subscriptions to enable consistent policy application
-3. **Apply foundational policies** - Implement policies for tagging, allowed regions, required encryption, and network security
-4. **Configure monitoring** - Set up compliance dashboards and alerts for policy violations
+- **Assign regulatory compliance initiatives** - Enable built-in initiatives in Defender for Cloud that map to your required frameworks (MCSB, PCI-DSS, ISO 27001)
+- **Create a management group hierarchy** - Organize subscriptions to enable consistent policy application
+- **Apply foundational policies** - Implement policies for tagging, allowed regions, required encryption, and network security
+- **Configure monitoring** - Set up compliance dashboards and alerts for policy violations
 
 This baseline provides immediate visibility into your compliance posture and a foundation for continuous improvement.

learn-pr/wwl-sci/design-solutions-regulatory-compliance/includes/2a-ai-compliance-considerations.md

@@ -68,13 +68,13 @@ AI systems must include safeguards against generating harmful content. Implement
 
 With these compliance areas in mind, consider the following when designing AI compliance solutions:
 
-1. **Integrate AI governance with existing frameworks** - Align AI policies with your corporate governance, data governance, and risk management processes rather than creating separate tracks
+- **Integrate AI governance with existing frameworks** - Align AI policies with your corporate governance, data governance, and risk management processes rather than creating separate tracks
 
-2. **Implement compliance early** - Build compliance controls into AI projects from the start rather than retrofitting them later
+- **Implement compliance early** - Build compliance controls into AI projects from the start rather than retrofitting them later
 
-3. **Plan for regulatory evolution** - AI regulations are rapidly evolving; design flexible governance that can adapt to new requirements
+- **Plan for regulatory evolution** - AI regulations are rapidly evolving; design flexible governance that can adapt to new requirements
 
-4. **Document everything** - Maintain comprehensive records of AI system design, training data, testing results, and operational decisions to support audits and regulatory inquiries
+- **Document everything** - Maintain comprehensive records of AI system design, training data, testing results, and operational decisions to support audits and regulatory inquiries
 
 ## Microsoft tools for AI compliance