Microsoft GCC, CTI IT and Compliance Services, Maryland

To meet the unique and evolving requirements of the United States Federal, State, Local, and Tribal governments, as well as contractors holding or processing data on behalf of the US Government, Microsoft offers the Office 365 Government GCC environment. Available through multiple channels including Volume Licensing, interested organizations go through a validation process to ensure eligibility before an environment is established. Trials are available to only US Government entities at this time.

CTI’s LevelUp GCC Process:

Planning – Understanding what data is handled by the customer to determine the selection of GCC vs. GCC High. Understand the customer’s workflow, to determine with the customer which Microsoft services can help them meet organizational needs. Determine which Microsoft or Non-Microsoft Security Protection Assets should be used to meet CMMC Requirements.
Implementation – Enable Microsoft Services needed to meet CMMC requirements, integrate non-Microsoft Security Protection Assets needed to meet CMMC requirements.
Data Migration – Migrate data per the results from the planning and implementation discovery.
Documentation – Provide a list of configured services and values with a detail mapping for configured services to CMMC practices.

Compliance

Office 365 GCC High and DoD meet the compliance requirements for the following certifications and accreditations:

Office 365 GCC High and DoD: Is assessed using the National Institute of Standards and Technology (NIST) Special Publication 800-800-53 controls at a FIPS 199 High Categorization.
Office 365 DoD: The security controls and control enhancements for United States Department of Defense Cloud Computing Security Requirements Guide (SRG) for information up to Impact Level 5 (L5).
Per the DoD requirements, only Department of Defense entities might purchase licenses for the Office 365 DoD environment that is certified as DoD SRG L5. Non-Department of Defense entities who meet the appropriate eligibility requirements might purchase licenses for the Office 365 GCC High environment that is assessed using NIST SP 800-53 controls at a FIPS 199 High Categorization and can demonstrate equivalency to IL4 or necessary inheritance for CMMC.

Contact Us Today Give Us a Call (800) 606-6060

File Sharing

Users have multiple options for sharing files and folders in SharePoint and OneDrive. All the options are available in the GCC High and DoD environments. Users in GCC-High will be able to share only with other organizations in GCC-High. Additionally, NON-GCC High email addresses attached to user profiles aren’t supported and won’t allow alert emails to be sent. For example, on premises User A is assigned a Gmail email address and then synced to an Azure GCC High organization. User A navigates to a library and creates an alert for any changes. The alert won’t be sent to the Gmail address.