Certified Microsoft Cloud Solution Provider

Yes, CloudFit can, although not every AOS-G Partner offers configuration support to meet & maintain CMMC compliance. The Cybersecurity Maturity Model Certification (CMMC) encompasses 110 security controls based on the NIST SP 800-171 framework. These controls are designed to protect Controlled Unclassified Information (CUI) and Federal Contract Information (FCI) from cyber threats. In a GCC High environment, many of these controls are satisfied by default due to the stringent security and compliance standards that Microsoft has implemented. Specifically, GCC High meets approximately 75% of the NIST SP 800-171 controls. However, it is important to note that the GCC High tenant still needs to be configured to meet all NIST 800-171 controls to be fully CMMC compliant. By partnering with CloudFit, your organization can leverage our expertise to ensure that your GCC High environment is properly configured and maintained to meet all CMMC requirements, providing you with a secure and compliant foundation for your operations.

Yes, CloudFit does, but only a select few AOS-G Partners offer 24x7 Network Security Monitoring & Maintenance. CloudFit's 24x7 Security Operations Center as a Service consists of our engineers configuring & tuning Microsoft's Security Products in customer environments to monitor, report and remediate incidents. We employ this cost-effecive, Microsoft native & CMMC compliant solution for DoD agencies, Nuclear DIBs, and Small Businesses alike.

Microsoft's GCC and GCC High environments can both be configured to achieve CMMC compliance. For the majority of Defense Industrial Base Partners, the question is "do my contracts contain or require access to Export Controlled CUI." If people in your organization handle data goverened by ITAR or EAR, you likely need to be on GCC High.

Compliance standards that can be met with GCC include CMMC L1-L2, NIST 800-171, DFARS 7012, FedRAMP Moderate & FBI CJIS. The GCC environment is aligned with CMMC L1 requirements, but can be adjusted to meet CMMC L2. Certain features may not be in compliance with CMMC L2, and need to be disactivated and montored to ensure they remain inactive.

Compliance standards that can be met with GCC High include CMMC L1-L3, NIST 800-171, FedRamp Moderate & High, FBI CJIS & DoD SRG L2-L5. This is the only Microsoft Cloud solution available if your organization handles export controlled data subject to ITAR or EAR.

Absolutely not! Microsoft compensates AOS-G Partners based on the volume of business that they facilitate to Microsoft's Government Cloud Offerings. Your organization will benefit from discounted license prices, expert guidance when determining license SKUs and associated features, and rapid support when activating and configuring licenses for the end user.