Why does using SQL Management Studio help the company comply with its security policy?

While SSMS allows executing queries to extract data, simply extracting data does not, by itself, fulfill security policy compliance as much as establishing the secure infrastructure for data storage.

SQL Server Management Studio (SSMS) is the primary administrative tool for SQL Server, enabling database administrators to create, configure, and manage databases. For security compliance, SSMS facilitates the establishment of dedicated databases for securely storing audit trails, security event logs, and other compliance-related data, ensuring proper retention and availability for security analysis and policy adherence.

Using a standard TCP port is a basic connectivity configuration for SQL Server and SSMS, which does not directly contribute to complying with a security policy in a significant way.

SQL Mail (now Database Mail) is a feature of SQL Server for sending alerts, not a primary function of SSMS, and creating a database for logs is a more foundational contribution to overall security compliance than sending alerts.