Understanding Compliance Between Microsoft 365 Commercial, GCC, GCC-High and DoD Offerings
Understanding compliance between Commercial, GCC, GCC High and DoD offerings: There remains much confusion as to what service supports what standards best. If you have DFARS, ITAR, FedRAMP, CJIS, IRS and other regulatory requirements and you are trying to understand what service is the best fit for your organization then you should read this article.Understanding Compliance Between Commercial, Government and DoD Offerings - February 2021 Update
Understanding compliance between Commercial, Government and DoD offerings: There remains much confusion as to what service supports what standards best. If you have DFARS, ITAR, FedRAMP, CJIS, IRS and other regulatory requirements and you are trying to understand what service is the best fit for your organization then you should read this article.The Microsoft 365 Government (GCC High) Conundrum - DIB Data Enclave vs Going All In
The DIB (Defense Industrial Base) are embracing M365 GCC High to achieve compliance with U.S. defense regulations. However, not all deployment approaches are equal. Many opt for a 'ITAR Compliant Data Enclave', while others may come to the conclusion they must go all into GCC High.History of Microsoft Cloud Service Offerings leading to the US Sovereign Cloud for Government
Microsoft has evolved our cloud service offerings to include the US Sovereign Cloud with Azure Government, Microsoft 365 GCC High and DoD. This article puts the history in perspective of how we ended up with multiple clouds, as opposed to one instance with many data enclaves.Microsoft US Sovereign Cloud Myth Busters - CUI Effectively Requires Data Sovereignty
We will focus on the myth that Controlled Unclassified Information (CUI) does not require data sovereignty. This article is written through the lens of requirements to protect CUI in the context of the U.S. Department of Defense for national security, such as in alignment with the Defense Industrial Base (DIB) and the Cybersecurity Maturity Model Certification (CMMC).Understanding Compliance Between Commercial, Government, DoD & Secret Offerings - July 2025 Update
Understanding compliance between Commercial, Government, DoD & Secret Offerings: There remains much confusion as to what service supports what standards best. If you have CMMC, DFARS, ITAR, FedRAMP, CJIS, IRS and other regulatory requirements and you are trying to understand what service is the best fit for your organization then you should read this article.
