As the Azure development team continues to deliver a rapid pace of innovation to defense customers, we continue to support Department of Defense (DoD) customers and partners in providing new functionality to meet mission requirements.
In many cases, accelerating mission utilization means teams can create, ship, and authorize new applications faster and more securely. For the wide range of suppliers providing goods and services to the Department of Defense, including the Defense Industrial Base (DIB), this also means aligning with changing compliance requirements.
Navigating the new Cybersecurity Maturity Model Certification (CMMC) from the DoD is an immediate challenge for customers and partners in the defense ecosystem. Our CMMC acceleration program is designed to help DIB customers achieve higher levels of sustainable cybersecurity and prepare for reviews. In addition, we offer a variety of new DoD Impact Level 5 services and a range of partner programs to meet the diverse needs of our customers and partners from every angle.
Extensive IaaS and PaaS functions with DoD IL5
Mission owners who choose Azure Government can now access an even wider range of IaaS and Paas capabilities to drive initiatives using Azure Government 120 Azure Government services are now DoD Impact Level 5 (IL5) accredited. Some notable services in this latest wave include Azure Sentinel, Windows Virtual Desktop (WVD), Azure Databricks, and Azure NetApp Files.
Many defense customers today use Azure Sentinel for an enterprise-wide bird’s eye view. You can aggregate data from any source, including users, applications, servers, and devices running on-premises or in any cloud, with millions of records in seconds. To enable secure remote work, agencies use Windows Virtual Desktop (WVD) to provide employees with more productive remote and work-from-home scenarios while maintaining a strict security and compliance stance.
To drive a unified data strategy for the mission, Azure Databricks offers big data analytics and AI with an optimized Apache Spark. It combines analytics for all of your data with collaborative data science functions. With Azure NetApp Files, enterprise LOB and storage teams can easily migrate and run complex, file-based applications without any code changes, so Linux and Windows apps can run smoothly on Azure.
In addition to the wide range of Azure Government services available at IL5, mission owners can choose from multiple regions across the country and benefit from reduced latency, expanded geo-redundancy, and a range of backup, recovery, and cost optimization options. We recommend reading the Isolation guidelines for IL5 workloads Documentation page to help understand the configurations and settings for isolation required to support IL5 data.
Navigate to CMMC Compliance for DoD Suppliers
In December, the Department of Defense announced a phased roll-out of CMMC in fiscal years 2021-2025 to test the implementation of CMMC requirements for Level 3 and below on select acquisitions. Because CMMC is designed to reflect a company’s cybersecurity maturity level, Microsoft recommends aiming for a high watermark to meet or exceed the procurement requirements.
To achieve CMMC Level 3 or higher, we recommend Azure Government and / or Microsoft 365 Government (GCC High) as these environments are suitable for initiatives with citizenship or ITAR requirements. CMMC levels 1 and 2 can also be achieved with Azure Commercial or Microsoft 365 Government (GCC).
If you are a DIB customer involved in compliance, the Microsoft CMMC Acceleration Program can help you close compliance gaps and minimize risk, evolve your cybersecurity towards a more agile and stable mindset, and achieve CMMC certification to facilitate. Within this program, you will have access to a portfolio of learning resources, architecture references and automated implementation tools that are tailored to the certification journey.
New options available with DFARS in Azure Commercial
Microsoft continues its commitment to DoD contractors and the DIB through Announcement of support for Defense Federal Acquisition Regulation Supplement (DFARS)) Requirements in commercial Azure cloud regions.
The introduction of DFARS 7012 in Azure Commercial gives you more choice in choosing Microsoft cloud offerings that best meet your needs for protecting controlled unclassified information. For example, organizations that choose Microsoft 365 Government (GCC) deployed on commercial Azure cloud regions in the United States may now have paired Azure services that meet DFARS 7012 requirements. More information can be found here documentation.
Partnerships continue to drive innovation for the mission
General Dynamics Information Technology (GDIT), a division of General Dynamics, recently signed a partnership agreement with Microsoft that enables GDIT to enable Department of Defense customers to migrate to Microsoft 365 and Azure Government, including its Azure Government Classified Regions DEOS contract (Defense Enterprise Office Solution).
Last year, we expanded the Agreement for Online Services for Government (AOS-G) program to include many new partners and meet the growing demands of the mission by enabling system integrators (SIs) to deliver value-added services with the Secret Azure Government Environment. In addition, partners in the United States who support US federal, state, and local government agencies are eligible for the Azure Government Cloud Solution Provider (CSP) program. Microsoft has a strict validation program to determine eligibility before partners can access Azure Government. To find out more, email us at firstname.lastname@example.org.
Your mission – our commitment
For more than 40 years, Microsoft has worked with the Department of Defense, the intelligence community, and national security agencies to tackle our country’s most complex challenges. We continue to invest in rapidly deploying new Azure Government capabilities to support mission requirements for all data classifications and have cloud experts ready to ensure your success.
Azure Government is the mission-critical cloud for US government agencies and their partners and offers a continuum of computation across data classifications, ranging from the mission cloud to the intelligent edge. This enables customers to accelerate innovation with the broadest range of commercial functions and the broadest compliance coverage of any government. only cloud.
Disclaimer: Customers are fully responsible for ensuring that they comply with all applicable laws and regulations. The information provided in this post does not constitute legal advice. Customers should consult their legal counsel with questions regarding legal or regulatory compliance.