Microsoft 365 GCC High - The Inside Story with Richard Wakeman

Confused about Microsoft 365 and DFARS/CMMC compliance?

In this episode, I speak with Richard Wakeman, Chief Architect for cybersecurity of Aerospace & Defense @ Microsoft!

We discuss the history of the government clouds, the need behind GCC and GCC High, and much more!

Here are some highlights:

The origins of the Microsoft clouds
Which clouds support DFARS 7012 compliance
When will GCC High be FedRAMP authorized?
CUI enclave considerations

Richard is a wealth of knowledge, and I have personally benefited from his compliance blog articles since at least 2020!

If you are currently operating in the Microsoft cloud or are trying to decide which Microsoft cloud to buy, you won't want to miss this!

Were you aware that GCC High isn't FedRAMP authorized yet? What about Microsoft 365 commercial not being compliant with DFARS 7012?

Whatever your thoughts are, feel free to let me know in the comments!

Follow Richard on LinkedIn:   / wakeman  

Microsoft Cloud compliance article: https://aka.ms/MSGovCompliance

Microsoft 365 Roadmap: https://www.microsoft.com/en-us/micro...

-----------

Thanks to our sponsor Vanta!

Want to save time filling out security questionnaires?

Experience questionnaire automation here: https://vanta.com/grcacademy

-----------

Governance, Risk, and Compliance Academy (GRC) Academy is a training and research platform!

Online GRC Training: https://grcacademy.io/courses/?utm_so...

00:00 Beginning
00:40 Richard's Background
03:19 History of Microsoft's Public and Community Clouds
09:23 Microsoft Branding - M365 Commercial vs GCC vs GCC High
11:41 GCC High FedRAMP Moderate Equivalency
15:35 Why FedRAMP High vs Moderate?
16:32 DFARS 7012 Compliance
20:34 Why M365 Commercial Isn't DFARS 7012 Compliant
23:26 Why Does It Take So Long for GCC High to Get New Features?
26:53 Microsoft Copilot Availability in GCC High
27:46 Windows Autopilot Availability in GCC High
30:45 CMMC Is Finally Here
33:28 To CUI Enclave or Not to CUI Enclave
44:26 Meet Me Tenant
48:03 Microsoft CMMC Product Placemat
52:38 Microsoft Compliance Manager
55:13 CMMC Technical Reference Guides
56:23 Landing Zones and Policy Initiatives
58:37 War Story
01:01:30 Conclusion

#cmmc #microsoft #microsoft365 #m365 #gcchigh #azure #govcloud