Forum Discussion

HaranStark's avatar
HaranStark
Copper Contributor
Aug 25, 2020
Solved

Microsoft's Perspective on FCI

What is Microsoft's perspective on the definition of FCI that was used to assess controls implemented for Azure and O365 against CMMC practices that call out FCI? 
  • DondiWest's avatar
    DondiWest
    Aug 25, 2020

    Hello HaranStark, Microsoft's position on the definition of Federal Contract Information (FCI) aligns with the Federal Acquisition Regulations (FAR), which states that FCI is:

     “Information not intended for public release. It is provided by or generated for the Government under a contract to develop or deliver a product or service to the Government.  FCI does not include information provided by the Government to the public.” 

    Reference: Federal Acquisition Regulation https://www.acquisition.gov/content/52204-21-basic-safeguarding-covered-contractor-information-systems

DondiWest's avatar
DondiWest
Former Employee
Aug 25, 2020

Hello HaranStark, Microsoft's position on the definition of Federal Contract Information (FCI) aligns with the Federal Acquisition Regulations (FAR), which states that FCI is:

 “Information not intended for public release. It is provided by or generated for the Government under a contract to develop or deliver a product or service to the Government.  FCI does not include information provided by the Government to the public.” 

Reference: Federal Acquisition Regulation https://www.acquisition.gov/content/52204-21-basic-safeguarding-covered-contractor-information-systems

Resources