Event banner
Event details
How does Microsoft plan to leverage CMMC for GCCH with customers who are in both GCCH and Commercial. Without cross-sovereign awareness for cloud tenancies, managing multiple tenants becomes cumbersome and overhead costly. While you can attain tenant-specific maturity levels; how does a multi-sovereign-cloud organization do this efficiently and cost-effectively? Example: Using the same tools in both tenants to manage document protection. Today, tenants cannot 'share' protection policies or labels. What is Microsoft's approach to allowing organizations that *have to* span different sovereign clouds a more unified administration and protection model?
Paul Meacham
Microsoft
MicrosoftHowdy Marcos!
Microsoft is in the same position. Microsoft runs a global business with more than 180k people homed in the WW service. In order to meet our contractual commitments to the US Federal Government, Microsoft formed the Microsoft Federal business subsidiary business homed in a US//NOFORN GCC High tenant. Both the WW & FedNet tenants have separate SMTP addresses (@microsoft.com vs @microsoftfederal.com) and separate identities. We provide separate devices (both physical and virtual) to provide data isolation. We have separate administrators and cyber teams.
There are some ways to wire up a Commercial tenant and a GCC High tenant such as calendar free busy, file sharing via one-time passcode (OTP) and Teams federation. There is also the idea of an extranet or a "meet me" tenant that can be used as an intermediate data repository and workspace. There is an article here that details some of the available cross-cloud and cross-tenant collaboration modalities: https://techcommunity.microsoft.com/t5/public-sector-blog/m365-cross-cloud-and-cross-tenant-collaboration-scenarios/ba-p/2967674
Microsoft is working on cross-cloud B2B (CCB2B) which will allow even more sharing modalities as just about every one of our large, strategic customers operate globally and have some requirement for national cloud use cases (US, China, France, etc.).
I hope this helps!
Feel free to connect with me to discuss further 🙂