RichardWakeman Thanks so much for the reply. This is extremely helpful. I saw on the FedRAMP marketplace that Microsoft Multi Tenant is listed as FedRAMP Moderate. Is this still correct, or is this outdated? Or is this something different than Commercial Office 365?
https://marketplace.fedramp.gov/products/MSO365MT/
Also there seems to be Partner solutions out there to achieve CMMC compliance on commercial cloud. Would you agree a solution like PreVeil Office 365 commercial cloud works to meet CMMC?
https://www.preveil.com/preveil-vs-microsoft-gcc-high/
We currently use Information Protection, and E5 licenses to achieve these controls. Would a well put together solution using Microsoft technologies that meets all 110 controls pass CMMC, in your opinion?
Thanks again for clarifying!