GCC low and GCC high

Gabe 0 Reputation points
2023-01-15T15:40:04.5533333+00:00

Question for this post is with GCC "low" ad GCC high being implemented, have their been any big changes? If a tenant has GCC low are they still able to maintain compliance with the handling of CUI related materials or is that still something that only GCC high is able to do?

SharePoint Server Management
SharePoint Server Management
SharePoint Server: A family of Microsoft on-premises document management and storage systems.Management: The act or process of organizing, handling, directing or controlling something.
2,991 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,144 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Dimple Rane 916 Reputation points MVP
    2023-01-15T16:39:21.2+00:00

    GCC (Government Community Cloud) is a cloud environment provided by Microsoft Azure that is specifically designed to meet the unique requirements of the U.S. government. GCC Low and GCC High are two different tiers of GCC, each with different security and compliance requirements.

    GCC Low is intended for use by U.S. government organizations that handle sensitive but unclassified (SBU) data and have less stringent compliance requirements. GCC High is intended for use by U.S. government organizations that handle sensitive and/or classified data and have more stringent compliance requirements.

    With the implementation of GCC Low and GCC High, there have been some changes in terms of security and compliance requirements. GCC High has more stringent security controls and compliance requirements compared to GCC Low.

    Regarding handling of CUI (controlled unclassified information) related materials, it is important to note that handling of CUI is subject to compliance with the specific regulations and guidelines set by the agency responsible for the data. GCC High provides more stringent security controls and compliance requirements compared to GCC Low, but it is not guaranteed that compliance with CUI handling can only be achieved by using GCC High. It's important to consult the specific regulations and guidelines set by the agency responsible for the data, to ensure that your organization is compliant with CUI handling.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.