Forum » General » Suggestions » Why Should You Choose O365 GCC High?

Why Should You Choose O365 GCC High?

  • Government Contractors of all sizes are deploying to Office 365 GCC High for compliance reasons and peace of mind. While per license pricing is more than Commercial, for most organizations, the ability to become fully DFARS and ITAR compliant outweighs the cost difference. DCMA is currently conducting DFARS audits on contractors within the Defense Industrial Base (DIB), and the DoD is taking steps to reward businesses for their compliance efforts. DFARS will continue to be an enforced requirement and gain further significance as CMMC is to be called out as a new explicit requirement in the upcoming DFARS revision - which will directly link the two. 

    At the CMMC 1.0 Press Conference, Ellen Lord (Under Secretary of Defense for Acquisition & Sustainment) stated "One of my biggest concerns is implementing CMMC for small and medium businesses, because that's where a large part innovation comes from.  We need small and medium businesses in our defense industrial base, and we need to retain them... " Small and medium businesses can alleviate many of their existing costs associated with on premises servers, systems, maintenance and upkeep by moving to cloud platforms and infrastructure. However, not all cloud options are equal.

    If you do work with the US Government, regardless of fund source or procurement process, you need GCC High. DFARS 7012 and CMMC have three basic requirements:

    1. Adequate Security: Basically NIST 800-171's 110 distinct security controls plus several additional practices introduced by CMMC
    2. Contractual Flowdown: If the prime contractor has to meet these security requirements, so do their subcontractors or vendors
    3. Event Reporting: If you have an incident, or you were to be compromised in any way, you need to let the government know and they will need access to the cloud environment beyond the scope of your specific tenant

    The first can be met with each option of Office 365, including GCC High. The second requirement requires you meet the first and third. The third requirement can ONLY be met with GCC High.

    While there are still some contractors delaying their migration to Office 365 GCC High, it is not a decision that should be taken lightly as the government is getting more aggressive in how they are evaluating the SSPs and POA&Ms of prospective contractors as part of the source selection board process.


    Learn more about Microsoft Government Cloud | Office 365 Government

      August 21, 2020 9:43 AM PDT