MicrosoftMicrosoftI realize this article is a bit older, but hoping I can get an answer to a simple question here. What if my organization does not use any type of cloud-based software or storage services. Our company does not allow any type of off-property storage. All data is stored in-house on a private file share server. Do we still need to use GCC High to comply with NIST, D-FARS, etc.? Can we just use standalone, single-user licenses of the business version of Office? If we must use GCC High either way does that require us to use GCC High on every PC that can talk to one that stores, or transmits CUI, or just the ones that need to regardless of whether or not it processes any CUI, CDI, or other controlled information?
Thank you in advance for your time and information,
Joe Schwartz
