Microsoft Government Community Cloud (GCC) is a version of Microsoft 365 that was adapted specifically for government entities. Microsoft GCC How does Microsoft GCC Fit into DoD CUI Security Requirements? Unattributed “CMMC” references that are not attributed to existing frameworks.CMMC Levels 4 & 5: CMMC Levels 4 & 5 build off CMMC Level 3 and include controls from a range of frameworks:.CMMC Level 3: Includes CMMC Level 2 requirements addresses all NIST 800-171 controls and a few others.CMMC Level 2: Includes CMMC Level 1 requirements addresses a little over half of NIST 800-171 controls.

CMMC Level 1: Addresses FAR 52.204-21 cybersecurity principles.

CMMC ComplianceĬybersecurity Maturity Model Certification (CMMC) goes hand in hand with NIST 800-171, but it increases compliance requirements for organizations at different “levels”: It’s important for organizations in the Department of Defense (DoD), General Services Administration (GSA), NASA, and other federal/state agency supply chains to implement these security measures and protect the information in their defense contracts. NIST 800-171 is a Special Publication that offers the security measures an organization should take in order to protect the confidentiality of CUI. In order to help you make the best decision for your organization, we will be detailing the differences between each licensing option and how they fit into your compliance standards.įirst, let’s touch on what NIST 800-171 and CMMC compliance means. It’s important to understand the differences between Microsoft GCC and Microsoft GCCH, as well as the E3, E5, and F5 licensing options for Microsoft 365. There are many options when it comes to Microsoft products and licensing options, and the best one for your organization might not be apparent right away.

Generally, this means your technologies must protect Certified Unclassified Information (CUI) and be able to prove that they are compliant with NIST 800-171 and Cybersecurity Maturity Model Certification (CMMC). As a contracted organization in the supply chain, manufacturing, Department of Defense (DoD) or aerospace realms, you need to be sure the licensing option you choose complies with Department of Defense standards and requirements.

Microsoft office 365 e3 itar compliance