Event banner
Event details
What are the current rules around conducting a penetration test against a company's footprint in GCC High and Azure government? We have a handful of clients that are expecting eventual CMMC Level 3 requirements.
justinO
Microsoft
MicrosoftHi Nick - Thank you for asking this. We do have a Penetration Testing Rules of Engagement which outlines scope and engagement: https://www.microsoft.com/en-us/msrc/pentest-rules-of-engagement?msclkid=bf4ba221ba8711ec80349cf2bb73b179.
Aside from this Microsoft also conducts penetration testing on a regular basis of our services and software.
- Thanks Justin! Just to clarify, these rules apply to GCC High and Azure Government as well?
- RichardWakemanThis is general for all our cloud products and services.
