GRC Academy5 Nov 2024

Microsoft 365 GCC High: The Inside Story with Richard Wakeman

Confused about Microsoft 365 and DFARS/CMMC compliance?

In this episode, I speak with Richard Wakeman, Chief Architect for cybersecurity of Aerospace & Defense @ Microsoft!

We discuss the history of the government clouds, the need behind GCC and GCC High, and much more!

Here are some highlights:

The origins of the Microsoft clouds
Which clouds support DFARS 7012 compliance
When will GCC High be FedRAMP authorized?
CUI enclave considerations

Richard is a wealth of knowledge, and I have personally benefited from his compliance blog articles since at least 2020!

If you are currently operating in the Microsoft cloud or are trying to decide which Microsoft cloud to buy, you won't want to miss this!

Were you aware that GCC High isn't FedRAMP authorized yet? What about Microsoft 365 commercial not being compliant with DFARS 7012?

Whatever your thoughts are, let me know!

Follow Richard on LinkedIn: https://www.linkedin.com/in/wakeman/

Microsoft Cloud compliance article: https://aka.ms/MSGovCompliance

Microsoft 365 Roadmap: https://www.microsoft.com/en-us/microsoft-365/roadmap

-----------

Thanks to our sponsor Vanta!

Want to save time filling out security questionnaires?

Experience questionnaire automation here: https://vanta.com/grcacademy

-----------

Governance, Risk, and Compliance Academy (GRC) Academy is a training and research platform!

Online GRC Training: https://grcacademy.io/courses/?utm_source=podcast&utm_medium=s1-e36&utm_campaign=courses

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(55)

Deltek's Journey to FedRAMP Moderate Equivalency

I have a surprise for you --- the last GRC Academy podcast!In this last episode, Michael Greenman from Deltek shares the journey to FedRAMP Moderate Equivalency for Deltek Costpoint GovCon Cloud Moder...

18 Nov 202536min

What's Next for GRC Academy and Jacob Hill

I have an incredible announcement to share! 👀Before that though, let me share some of my history with you.Back in 2016, I started a side-business called TEKFused LLC focused on web design/hosting.Fas...

4 Sep 20253min

The Business Case for CMMC - Surviving DOGE

CMMC certification could be the key to surviving DOGE cuts! 👀In this episode, I’m joined by Derek Kernus of Aethon Security to discuss the business case for CMMC!This episode was really refreshing to...

19 Jun 202552min

The Compliance Playbook to Cybersecurity

"Compliance is the security referee - frameworks are the playbooks."In this episode, I’m joined by Tim Golden, Founder of Compliance Scorecard, to unpack the misunderstood, and mission-critical world ...

5 Jun 202531min

How HITRUST Fixes What’s Broken in Cybersecurity Compliance

Cybersecurity frameworks can learn a lot from HITRUST.In this episode, Ryan Patrick of HITRUST explains how HITRUST approaches the assurance problem, from centralizing the certification process to fre...

27 Mai 202555min

CUI Masterclass with Ryan Bonner

"Outread the others" - that's how Ryan Bonner mastered CUI.If you're confused about Controlled Unclassified Information (CUI) - you're not alone. Many defense contractors (not to mention DoD themselve...

9 Mai 202551min

Small Business Achieves CMMC Level 2 Certification: Reynolds Construction's DIY Success Story

HR guy leads his company to CMMC level 2 certification! 👀In this episode I’m joined by Eric Fields of Reynolds Construction to learn how he led his business to CMMC level 2 certification!I call him "...

24 Apr 202536min

The FASTEST Way to CMMC Compliance - CUI Enclaves

CMMC rolls out in a few months and there are STILL companies who are JUST getting started!In this episode I’m joined by Daniel Akridge of Summit 7 to talk about the real challenges facing the Defense ...

10 Apr 202558min